Information Security
Stephen Touset
Meta user
Network profile
Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

81 Answers

Newest Activity Votes
1
Why is the HTTP protocol more susceptible to being intercepted than the BitTorrent protocol?
Oct 28 '19 at 7:00
12
Why are KDFs slow? Is using a KDF more secure than using the original secret?
Oct 4 '19 at 18:35
0
Can I securely share an HMAC key over a TLS connection?
Jul 9 '19 at 0:30
2
When encrypting password hashes, how to handle nonces?
Apr 5 '19 at 22:05
1
Appending a secret (pepper) to Argon2 password hashes
Mar 26 '19 at 20:57
6
For chip credit cards, what's preventing me from breaking the chip to trigger the magstripe failsafe?
Dec 31 '17 at 2:07
1
Theoretical - Password salting with concatenation vs. salting with HMAC
Apr 24 '17 at 23:27
1
How much more secure is encryption if the program requires random input from the user?
Apr 20 '17 at 0:57
9
What happened to MD6?
Apr 19 '17 at 21:19
0
How to check whether the erase was secure enough?
Jan 9 '17 at 23:45
15
Should the average user care about DNS security?
Dec 12 '16 at 22:56
2
How do Destination Servers Keep Track of my Public IP address?
Dec 6 '16 at 19:28
6
How to reduce trouble in case I lose access to my password manager?
Sep 19 '16 at 7:05
8
Is it possible to run out Public-Key servers' storage by sending them countless valid Public-Keys?
Aug 22 '16 at 1:46
3
What is the “cost” of hashing?
Aug 8 '16 at 22:30
1
How to check if the decryption is correct?
Jun 6 '16 at 20:52
7
Why can passwords be used to encrypt data, but are less strong for authentication?
Apr 2 '16 at 4:08
16
When encrypting cloud-stored data, is it acceptable to use the user's account password?
Mar 25 '16 at 18:19
4
What if TLS is suddenly found to have a critical defect?
Oct 30 '15 at 22:34
11
Can using emojis make someone's password safer?
Oct 29 '15 at 19:20
3
Why is U2F not good enough to be used as authentication?
Oct 22 '15 at 23:09
3
How safe would it be to store encrypted files on an unknown server?
Oct 22 '15 at 21:22
13
Not storing the salt? Is that an option?
Aug 7 '15 at 4:56
3
How easy is it to hide adding a file to a git repository
Jun 23 '15 at 18:48
1
How to identify hashes
Jun 18 '15 at 21:41
10
Which passwords to exclude from a password manager?
May 8 '15 at 17:21
1
putting my password in a php file (phpmailer)
Apr 29 '15 at 18:42
1
How can I stop an account I don't control from sending spam email in my name to my contacts?
Apr 24 '15 at 18:19
6
Is there any reason for using private key 2 times when creating security hash?
Apr 7 '15 at 22:47
7
How secure is MD5 for TLS message authentiaction?
Apr 7 '15 at 0:37
1 2 3