User David Wachtfogel

58 votes

Accepted

Client side password hashing

answered Oct 23, 2012 at 4:54

29 votes

Accepted

Confused about (password) entropy

answered Oct 5, 2012 at 6:23

28 votes

Accepted

Why do some sites prevent users from reusing their old passwords?

answered Sep 24, 2012 at 6:21

25 votes

Accepted

Is it safe to use a weak password as long as I have two-factor authentication?

answered Nov 14, 2012 at 22:01

21 votes

Accepted

Are there really functioning quantum computers?

answered Oct 24, 2012 at 14:20

18 votes

Accepted

Bypassing the BIOS password

answered Sep 3, 2012 at 7:59

17 votes

Accepted

How to use postMessage securely

answered Sep 28, 2012 at 6:56

17 votes

How can you judge the physical security of a padlock?

answered Oct 11, 2012 at 20:18

16 votes

Accepted

Can someone detect the URL an android app uses?

answered Oct 18, 2012 at 14:02

16 votes

When using symmetric key encryption, do we need to sign?

answered Nov 4, 2012 at 7:57

15 votes

Accepted

Keyboard sniffing through audio recorded typing patterns

answered Oct 29, 2012 at 19:46

13 votes

Accepted

Practices for storing username/password in Web applications

answered Nov 1, 2012 at 22:05

13 votes

Privacy implications of IDFA/IDFV? (iPhone/iOS)

answered Oct 17, 2012 at 8:03

12 votes

Should I be concerned when a "Forgot Password?" tool sends my password in plaintext?

answered Oct 30, 2012 at 7:44

12 votes

Calculating password entropy?

answered Oct 3, 2012 at 17:45

11 votes

Accepted

Can a VPN decrypt my SSL traffic?

answered Oct 2, 2012 at 10:34

11 votes

Accepted

What is the key when facial recognition is used as a password?

answered Oct 3, 2012 at 9:22

10 votes

What is SHA-3 and why did we change it?

answered Oct 5, 2012 at 5:22

9 votes

Accepted

Difference between non-repudiation and plausible deniability

answered Aug 27, 2017 at 14:06

7 votes

Accepted

Encryption in an embeddded system

answered Nov 7, 2012 at 7:53

7 votes

What is the potential impact of these SSL certificate validation vulnerabilities?

answered Oct 22, 2012 at 22:09

7 votes

Accepted

Do Client Nonces enhance the security of HTTP Digest Auth?

answered Oct 16, 2012 at 11:10

6 votes

Accepted

Is there any processor that could decrypt encrypted data and machine instructions?

answered Oct 13, 2012 at 20:12

5 votes

Does anyone use XML Encryption?

answered Oct 15, 2012 at 8:29

5 votes

Accepted

Best practices for TrueCrypt + Yubikey combination

answered Sep 24, 2012 at 22:21

5 votes

How can I encrypt a file with .NET and have the same file size of the original file?

answered Oct 30, 2012 at 18:46

4 votes

Reset password - should I prevent abusing it?

answered Nov 21, 2012 at 7:42

4 votes

How do I construct a rainbow table to crack a 6 character password?

answered Oct 25, 2012 at 13:10

4 votes

Accepted

User authentication + database encryption with same password

answered Nov 8, 2012 at 20:45

4 votes

Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?

answered Nov 4, 2012 at 4:38

Stack Exchange Network

62 Answers

Client side password hashing

Confused about (password) entropy

Why do some sites prevent users from reusing their old passwords?

Is it safe to use a weak password as long as I have two-factor authentication?

Are there really functioning quantum computers?

Bypassing the BIOS password

How to use postMessage securely

How can you judge the physical security of a padlock?

Can someone detect the URL an android app uses?

When using symmetric key encryption, do we need to sign?

Keyboard sniffing through audio recorded typing patterns

Practices for storing username/password in Web applications

Privacy implications of IDFA/IDFV? (iPhone/iOS)

Should I be concerned when a "Forgot Password?" tool sends my password in plaintext?

Calculating password entropy?

Can a VPN decrypt my SSL traffic?

What is the key when facial recognition is used as a password?

What is SHA-3 and why did we change it?

Difference between non-repudiation and plausible deniability

Encryption in an embeddded system

What is the potential impact of these SSL certificate validation vulnerabilities?

Do Client Nonces enhance the security of HTTP Digest Auth?

Is there any processor that could decrypt encrypted data and machine instructions?

Does anyone use XML Encryption?

Best practices for TrueCrypt + Yubikey combination

How can I encrypt a file with .NET and have the same file size of the original file?

Reset password - should I prevent abusing it?

How do I construct a rainbow table to crack a 6 character password?

User authentication + database encryption with same password

Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?