user avatar
user avatar
user avatar
Drew Lex
  • Member for 10 years
  • Last seen more than 9 years ago
63 votes
5 answers
15k views

Is it common practice to log rejected passwords?

41 votes
2 answers
25k views

Salted hashes vs HMAC?

19 votes
4 answers
5k views

Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?

9 votes
5 answers
6k views

Is there an asymmetric encryption algorithm that maintains the length of the plaintext?

8 votes
5 answers
905 views

Are we concentrating too much on password complexity?

6 votes
2 answers
2k views

What security standards and regulations are in place for bank ATM?

5 votes
2 answers
324 views

If two endpoints establish a mutual authenticated connection (TLSv1.0) is the medium between the endpoints a concern?

5 votes
2 answers
203 views

What drives FIPS140-2 compliance?

5 votes
2 answers
2k views

Why is NIST removing & not updating TLS guidance? What is the replacement?

3 votes
4 answers
2k views

If an ATM is stolen, how easy can the personal information of the users be recovered?

3 votes
1 answer
290 views

Can I enter PINs or passwords into a FIPS140-2 crytographic module in plaintext?

3 votes
3 answers
266 views

In what situations are web services required to protect confidentiality of user information?

2 votes
1 answer
284 views

Which mobile phone OS implements or plan to implement data protection using keys derived from passwords per NIST SP800-132?

2 votes
1 answer
250 views

How are AV scanners protecting against encrypted (PGPd) malicious code?

2 votes
1 answer
4k views

Are banks required to be PCI compliant?

2 votes
1 answer
6k views

What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?

2 votes
3 answers
198 views

Are mail-servers removed from security concerns in contrast with cloud storage?

1 vote
1 answer
122 views

Are there any FIPS140-2 requirements that apply when boot code is updated in the field?

0 votes
7 answers
4k views

Are passwords made up from concatenating a few foreign words better than shorter random characters? [duplicate]

0 votes
2 answers
159 views

Security in the breaking cloud? Storage Wars?