Drew Lex's user avatar
Drew Lex's user avatar
Drew Lex's user avatar
Drew Lex
  • Member for 11 years, 5 months
  • Last seen more than 10 years ago
63 votes
5 answers
15k views

Is it common practice to log rejected passwords?

41 votes
2 answers
28k views

Salted hashes vs HMAC?

20 votes
4 answers
5k views

Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?

10 votes
5 answers
6k views

Is there an asymmetric encryption algorithm that maintains the length of the plaintext?

8 votes
5 answers
913 views

Are we concentrating too much on password complexity?

6 votes
2 answers
2k views

What security standards and regulations are in place for bank ATM?

5 votes
2 answers
331 views

If two endpoints establish a mutual authenticated connection (TLSv1.0) is the medium between the endpoints a concern?

5 votes
2 answers
207 views

What drives FIPS140-2 compliance?

5 votes
2 answers
2k views

Why is NIST removing & not updating TLS guidance? What is the replacement?

3 votes
4 answers
2k views

If an ATM is stolen, how easy can the personal information of the users be recovered?

3 votes
1 answer
298 views

Can I enter PINs or passwords into a FIPS140-2 crytographic module in plaintext?

3 votes
3 answers
270 views

In what situations are web services required to protect confidentiality of user information?

2 votes
1 answer
289 views

Which mobile phone OS implements or plan to implement data protection using keys derived from passwords per NIST SP800-132?

2 votes
1 answer
254 views

How are AV scanners protecting against encrypted (PGPd) malicious code?

2 votes
1 answer
4k views

Are banks required to be PCI compliant?

2 votes
1 answer
6k views

What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?

2 votes
3 answers
202 views

Are mail-servers removed from security concerns in contrast with cloud storage?

1 vote
1 answer
125 views

Are there any FIPS140-2 requirements that apply when boot code is updated in the field?

0 votes
7 answers
4k views

Are passwords made up from concatenating a few foreign words better than shorter random characters? [duplicate]

0 votes
2 answers
163 views

Security in the breaking cloud? Storage Wars?