David Wachtfogel's user avatar
David Wachtfogel's user avatar
David Wachtfogel's user avatar
David Wachtfogel
  • Member for 11 years, 8 months
  • Last seen more than a month ago
58 votes
Accepted

Client side password hashing

29 votes
Accepted

Confused about (password) entropy

28 votes
Accepted

Why do some sites prevent users from reusing their old passwords?

25 votes
Accepted

Is it safe to use a weak password as long as I have two-factor authentication?

21 votes
Accepted

Are there really functioning quantum computers?

18 votes
Accepted

Bypassing the BIOS password

17 votes
Accepted

How to use postMessage securely

17 votes

How can you judge the physical security of a padlock?

16 votes
Accepted

Can someone detect the URL an android app uses?

16 votes

When using symmetric key encryption, do we need to sign?

15 votes
Accepted

Keyboard sniffing through audio recorded typing patterns

13 votes
Accepted

Practices for storing username/password in Web applications

13 votes

Privacy implications of IDFA/IDFV? (iPhone/iOS)

12 votes

Should I be concerned when a "Forgot Password?" tool sends my password in plaintext?

12 votes

Calculating password entropy?

11 votes
Accepted

Can a VPN decrypt my SSL traffic?

11 votes
Accepted

What is the key when facial recognition is used as a password?

10 votes

What is SHA-3 and why did we change it?

9 votes
Accepted

Difference between non-repudiation and plausible deniability

7 votes
Accepted

Encryption in an embeddded system

7 votes

What is the potential impact of these SSL certificate validation vulnerabilities?

7 votes
Accepted

Do Client Nonces enhance the security of HTTP Digest Auth?

6 votes
Accepted

Is there any processor that could decrypt encrypted data and machine instructions?

5 votes

Does anyone use XML Encryption?

5 votes
Accepted

Best practices for TrueCrypt + Yubikey combination

5 votes

How can I encrypt a file with .NET and have the same file size of the original file?

4 votes

Reset password - should I prevent abusing it?

4 votes

How do I construct a rainbow table to crack a 6 character password?

4 votes
Accepted

User authentication + database encryption with same password

4 votes

Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?