John's user avatar
John's user avatar
John's user avatar
John
  • Member for 11 years, 8 months
  • Last seen more than a month ago
  • Long Island, NY, United States
39 votes
4 answers
4k views

If email is insecure, why do we use it for password resets?

19 votes
2 answers
10k views

What is the purpose of the entropy parameter for DPAPI.Protect?

13 votes
2 answers
7k views

When, exactly, should old password reset tokens be deleted?

12 votes
4 answers
6k views

Is there a hash algorithm that can identify similar files or strings?

11 votes
2 answers
6k views

How to detect the NSA MITM attack on SSL?

10 votes
5 answers
11k views

Password reset links: random value or authenticated message?

10 votes
2 answers
3k views

Verify Login and Encrypt with PBKDF2

9 votes
3 answers
4k views

Is it possible to prove which public key was used to encrypt a message?

8 votes
4 answers
7k views

Mitigating SSLStrip by only serving a site over HTTPS?

8 votes
3 answers
4k views

LastPass One Time Recovery Passwords--How?

7 votes
3 answers
620 views

Does prompting for security questions on new computers add any security on banking websites?

7 votes
1 answer
4k views

WebRTC P2P SSL - Where are the keys generated?

6 votes
2 answers
3k views

HTTPS Sensitive Information and Caching

5 votes
3 answers
2k views

Securing AES 128 encrypted ZIPs against brute force attacks

5 votes
2 answers
2k views

Protecting Password Hashes with Stored Procedures?

5 votes
2 answers
2k views

Is it possible to create a secure chat web application relying on HTML5 web sockets?

4 votes
1 answer
2k views

RSA vs PBKDF2 for password storage (theoretical)

4 votes
1 answer
19k views

Possible to Derive Private Key from Public Key Given Enough Computing Power? [closed]

4 votes
1 answer
527 views

Public Key Certificate Pinning and MITM attack

4 votes
2 answers
5k views

How can Bank of America tell that I'm logging in on a computer I haven't used with them before?

4 votes
5 answers
499 views

Why wasn't the flame malware flagged by firewalls?

3 votes
3 answers
6k views

Recompute Rainbow table with salt?

3 votes
1 answer
2k views

DPAPI offline attack by cracking windows password?

3 votes
3 answers
2k views

Encrypting Fields in Database

3 votes
4 answers
10k views

Can JavaScript be used to install malware?

3 votes
3 answers
2k views

When websites use SMS as part of a password reset scheme, why do they ask for the user's phone number?

2 votes
1 answer
262 views

US Department of Labor Watering Hole Attack

1 vote
1 answer
137 views

Password Verification Server

1 vote
1 answer
147 views

Shared Global Blacklist Trust Issue

1 vote
1 answer
2k views

How does does the "Sign out all other sessions" feature work in Gmail?