John's user avatar
John's user avatar
John's user avatar
John
  • Member for 11 years, 10 months
  • Last seen more than a month ago
  • Long Island, NY, United States
1 vote
2 answers
957 views

iCloud Private Relay MITM Defense?

3 votes
3 answers
2k views

When websites use SMS as part of a password reset scheme, why do they ask for the user's phone number?

0 votes
1 answer
761 views

Is it insecure to use PBKDF2 on a SHA1 hashed password? [duplicate]

1 vote
1 answer
153 views

Shared Global Blacklist Trust Issue

4 votes
1 answer
533 views

Public Key Certificate Pinning and MITM attack

0 votes
1 answer
950 views

Is SQL Server 2016's Deterministic Encryption any good?

8 votes
4 answers
7k views

Mitigating SSLStrip by only serving a site over HTTPS?

0 votes
1 answer
173 views

Does ASP.NET guarantee the integrity of a page's controls on a post back?

7 votes
1 answer
4k views

WebRTC P2P SSL - Where are the keys generated?

4 votes
1 answer
19k views

Possible to Derive Private Key from Public Key Given Enough Computing Power? [closed]

1 vote
1 answer
312 views

How secure is the web-based file browser that comes with my NAS?

12 votes
4 answers
6k views

Is there a hash algorithm that can identify similar files or strings?

1 vote
3 answers
3k views

Brute Force In Order Or Random?

11 votes
2 answers
6k views

How to detect the NSA MITM attack on SSL?

9 votes
3 answers
4k views

Is it possible to prove which public key was used to encrypt a message?

1 vote
1 answer
2k views

How does does the "Sign out all other sessions" feature work in Gmail?

0 votes
1 answer
709 views

Allow read-only access to server-side pages for security review?

5 votes
2 answers
2k views

Is it possible to create a secure chat web application relying on HTML5 web sockets?

4 votes
1 answer
2k views

RSA vs PBKDF2 for password storage (theoretical)

1 vote
1 answer
142 views

Password Verification Server

5 votes
2 answers
2k views

Protecting Password Hashes with Stored Procedures?

7 votes
3 answers
631 views

Does prompting for security questions on new computers add any security on banking websites?

4 votes
2 answers
5k views

How can Bank of America tell that I'm logging in on a computer I haven't used with them before?

2 votes
1 answer
267 views

US Department of Labor Watering Hole Attack

3 votes
4 answers
10k views

Can JavaScript be used to install malware?

3 votes
3 answers
2k views

Encrypting Fields in Database

8 votes
3 answers
4k views

LastPass One Time Recovery Passwords--How?

13 votes
2 answers
7k views

When, exactly, should old password reset tokens be deleted?

10 votes
5 answers
11k views

Password reset links: random value or authenticated message?

39 votes
4 answers
4k views

If email is insecure, why do we use it for password resets?