Thomas Pornin

less info
meta site favicon meta user | stack exchange network profile network profile
82,448 reputation
16154289
bio website bolet.org/~pornin
location Quebec City, Canada
age 37
visits member for 2 years, 5 months
seen 7 hours ago
stats profile views 4,887

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


1,288 Answers

newest activity votes
319
CRIME - How to beat the BEAST successor?
193
Are passwords stored in memory safe?
172
Do any security experts recommend bcrypt for password storage?
136
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
111
How do certification authorities store their private root keys?
107
XKCD #936: Short complex password, or long dictionary passphrase?
98
How does SSL work?
61
CTRL+ALT+DEL Login - Rationale behind it?
60
How does SSL work?
58
How to securely hash passwords?
57
Why do people think that this is bad way to hash passwords?
49
What's the difference between SSL, TLS, and HTTPS?
46
Amount of simple operations that is safely out of reach for all humanity?
42
Certificate based authentication vs Username and Password authentication
40
Why do we not trust an SSL certificate that expired recently?
40
Is a rand from /dev/urandom secure for a login key?
38
“Real” Salt and “Fake” Salt
37
Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?
37
As a beginner in IT Security, should I learn TCP/IP?
37
Recommended # of iterations when using PKBDF2-SHA256?
35
Is authentication using personal pictures more secure than passwords?
34
NSA Suite A Cryptography: Security through obscurity?
34
Password Hashing add salt + pepper or is salt enough?
33
If email is insecure, why do we use it for password resets?
32
How valuable is secrecy of an algorithm?
32
What is the difference between SSL vs SSH? Which is more secure?
31
Should I be disabling Java?
31
How do you log in from an unsecured computer?
30
Why AES is not used for secure hashing, instead of SHA-x?
29
How hard is it to intercept SMS (two-factor authentication)?
1 2 3 4 5 … 43