Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 12407

the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.

2
votes
I'd argue that they are fundamentally no more secure than a traditional lock. These types of locks can also be opened by a standard physical key, so they by definition are susceptible to all of the we …
answered Oct 29 '14 by Stephen Touset
4
votes
their authentication remembered across browser sessions, use a CSPRNG to generate a random 128-bit string. Send them this string, then hash it (SHA-2/256 is fine), and store the hash alongside the …
answered Aug 10 '14 by Stephen Touset
16
votes
1answer
Some have argued for using AES-256-CTR with HMAC-SHA-256 for authenticated encryption over AEAD-specific modes like EAX and GCM. However, when doing, this, what should be HMAC'd? And how? Specificall …
asked Sep 20 '12 by Stephen Touset
0
votes
The problem that CSRF tokens prevent is request forgery. In order to conduct a successful exploit, the attacker would have to receive a copy of the token for the user they're trying to impersonate, no …
answered Apr 22 '13 by Stephen Touset
-1
votes
Google just associates that password with only that service. You could reuse that password for that account across, say, multiple email clients connecting to Gmail. But you wouldn't be able to also us …
answered Apr 29 '14 by Stephen Touset
11
votes
This is indistinguishable from your password simply being A || B || C.
answered Feb 19 '15 by Stephen Touset
49
votes
4answers
Do security images such as those presented upon logging into banks provide any tangible security benefits, or are they mostly theater? Per my understanding, if somebody is phishing your users, it's a …
asked Aug 23 '12 by Stephen Touset