Badge

 Guru Accepted answer and score of 40 or more. This badge can be awarded multiple times.

This badge has been awarded 53 times. Recently awarded to:
may 18 at 11:25
Touch Screen Password Guessing by Fingerprint Trace — D3C4FF 3,1261239
may 9 at 20:59
Is a rand from /dev/urandom secure for a login key? — Thomas Pornin 82.8k16155289
may 9 at 20:39
Is it okay to reveal database's table names? — Adnan 6,52111944
apr 28 at 19:07
CTRL+ALT+DEL Login - Rationale behind it? — Adnan 6,52111944
apr 23 at 21:06
How to securely hash passwords? — Thomas Pornin 82.8k16155289
apr 22 at 15:16
Amount of simple operations that is safely out of reach for all humanity? — Thomas Pornin 82.8k16155289
apr 18 at 13:36
Is it enough to only wipe a flash drive once? — Jesper Mortensen 3,0261025
apr 14 at 13:52
Why do we not trust an SSL certificate that expired recently? — Thomas Pornin 82.8k16155289
apr 11 at 16:34
Why not use larger cipher keys? — Fredefl 60134
apr 9 at 18:24
What malicious things can happen when clicking on links in email? — Hendrik Brummermann♦ 15.7k23483
apr 3 at 7:16
Why is application crash considered insecure? — Deer Hunter 751518
mar 27 at 20:48
At what point does something count as 'security through obscurity'? — Peleus 1,061210
mar 21 at 13:26
How is an ATM secure? — mgjk 2,5081313
mar 20 at 8:55
RSA vs. DSA for SSH authentication keys — emboss 761315
mar 13 at 0:18
What is the difference between https://google.com and https://encrypted.google.com? — Adnan 6,52111944
mar 7 at 12:04
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field — AJ Henderson 11k1834
feb 25 at 4:04
Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? — atdre 6,5501328
feb 5 at 19:00
Can anybody explain XSS to an idiot? — Chris Andrè Dale 9,06052257
feb 4 at 0:41
What's the difference between SSL, TLS, and HTTPS? — Thomas Pornin 82.8k16155289
jan 29 at 0:19
default.php file found on the server, is this a security threat? — Polynomial 32.7k1066135
jan 21 at 14:53
Certificate based authentication vs Username and Password authentication — Thomas Pornin 82.8k16155289
jan 15 at 13:18
Are passwords stored in memory safe? — Thomas Pornin 82.8k16155289
dec 23 at 3:30
Is Google spying on all of us? — tylerl 11.1k11441
dec 19 at 3:26
Is my developer's home-brew password security right or wrong, and why? — Polynomial 32.7k1066135
dec 3 at 23:20
How do certification authorities store their private root keys? — Thomas Pornin 82.8k16155289
nov 27 at 17:36
How do you explain the necessity of “nuke it from orbit” to management and users? — KDEx 1,003410
nov 20 at 19:18
Is it a bad idea for a firewall to block ICMP? — Scott Pack 7,98632560
nov 6 at 23:09
Attacking an office printer? — Polynomial 32.7k1066135
oct 25 at 14:47
Why do we lock our computers? — Bruce Ediger 2,2521914
oct 12 at 8:33
How does SSL work? — Luc 3,3862833
oct 7 at 3:36
From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work? — Polynomial 32.7k1066135
sep 11 at 20:02
CRIME - How to beat the BEAST successor? — Thomas Pornin 82.8k16155289
sep 11 at 16:27
What are rainbow tables and how are they used? — Crunge 67644
sep 8 at 15:24
Lessons learned and misconceptions regarding encryption and cryptology — D.W. 44.9k261156
sep 1 at 22:08
How to securely hash passwords? — Ozgur Ozcitak 793145
aug 5 at 12:46
Virus Encoded in Video — Polynomial 32.7k1066135
jul 31 at 2:49
How to store salt? — Polynomial 32.7k1066135
jul 30 at 20:24
“Username and/or Password Invalid” - Why do websites show this kind of message instead of informing the user which one was wrong? — Terry Chia 11.1k42367
jul 19 at 13:33
How can PayPal spoof emails so easily to say it comes from someone else? — Tom Leek 25k42668
jul 16 at 13:42
Are there DRM techniques to effectively prevent pirating? — Antony Vennard 11.3k12165
jun 27 at 17:27
Risks of giving developers admin rights to their own PCs — AlanBarber 56637
jun 15 '12 at 13:53
How do you destroy an old hard drive? — Scott Pack 7,98632560
mar 19 '12 at 11:52
Why would someone trust DuckDuckGo or other providers with a similar privacy policy? — D.W. 44.9k261156
feb 20 '12 at 11:35
Is social-engineering an actual threat — Chris Andrè Dale 9,06052257
feb 10 '12 at 22:21
How does hacking work? — Chris Andrè Dale 9,06052257
jan 24 '12 at 17:43
Why do law-abiding citizens need strong security? — yfeldblum 2,0211012
jan 7 '12 at 19:42
Do any security experts recommend bcrypt for password storage? — Thomas Pornin 82.8k16155289
jan 5 '12 at 15:44
What alternatives are there when SSH is being actively filtered? — petrus 61443
nov 10 '11 at 17:08
Why do sites implement locking after 3 failed password attempts? — Zian Choy 79158
oct 10 '11 at 5:20
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it? — Thomas Pornin 82.8k16155289
aug 16 '11 at 23:21
How to write an email regarding IT Security that will be read, and not ignored by the end user? — gowenfawr 5,96211220
aug 5 '11 at 18:56
Does an established ssl connection mean a line is really secure — AviD♦ 20.4k545114
jun 23 '11 at 9:16
How does changing your password every 90 days increase security? — Justin Cave 1,562148