User Jesper M

216 votes

Accepted

Password Hashing: add salt + pepper or is salt enough?

answered Apr 23, 2011 at 8:36

87 votes

Accepted

Is it enough to only wipe a flash drive once?

usb-drive deletion destruction flash-memory

answered Jul 26, 2011 at 10:33

52 votes

Accepted

Open Source vs Closed Source Systems

disclosure opensource

answered Jun 8, 2011 at 20:22

31 votes

Why is HTTPS not the default protocol?

tls web-application http

answered Jun 5, 2011 at 21:46

30 votes

What should be used as a salt?

passwords password-management salt

answered Oct 10, 2011 at 21:37

20 votes

Most secure password hash algorithm(s)?

passwords cryptography hash

answered Jun 25, 2011 at 23:03

19 votes

Accepted

ATA security erase on SSD

deletion

answered Sep 2, 2013 at 15:17

18 votes

how long does it take to actually generate rainbow tables?

cryptography hash brute-force

answered Apr 30, 2011 at 7:47

17 votes

How can crackers reconstruct 200k salted password hashes so fast?

passwords salt sha256

answered Jul 29, 2012 at 17:10

17 votes

Accepted

Does compiling from sources "kinda" protects from buffer overflow attacks?

appsec source-code buffer-overflow c

answered Jul 18, 2011 at 23:49

15 votes

What are the pros and cons of site wide SSL (https)?

web-application tls webserver

answered Jul 16, 2011 at 22:03

13 votes

How do I secure my login page?

appsec web-application authentication

answered Jul 25, 2011 at 22:53

13 votes

Accepted

Repairing corrupt TrueCrypt volumes/disks?

file-system truecrypt

answered Jul 14, 2012 at 13:22

13 votes

Accepted

DDoS Protection for DNS providers

dns ddos

answered Jul 24, 2012 at 12:07

10 votes

How do I securely exchange server logins with remote developers?

email ssh

answered Jul 19, 2011 at 22:17

9 votes

Is NTP vulnerable to DNS poisoning or spoofing attacks?

network dns ntp

answered Jul 7, 2011 at 9:19

9 votes

Can anyone provide references for implementing web application self password reset mechanisms properly?

appsec web-application password-management

answered Apr 5, 2011 at 9:25

8 votes

Accepted

Encrypting files in a windows environment

encryption windows file-encryption

answered Apr 18, 2011 at 20:32

8 votes

Best practices for securing an iPhone

mobile hardening ios iphone

answered Jul 15, 2011 at 18:24

8 votes

How to handle security issues of someone else's website

legal disclosure privacy ethics incident-response

answered Jun 25, 2011 at 11:05

8 votes

Nested Truecrypt containers

encryption truecrypt

answered Mar 31, 2012 at 12:44

8 votes

Share certain information only after death

encryption authentication privacy

answered Jun 11, 2013 at 7:41

6 votes

Increase the security of an already stored password hash

passwords hash pbkdf2

answered Mar 10, 2013 at 13:20

4 votes

Completely wiping a HDD (i.e. nothing is recoverable)

tools

answered Feb 11, 2012 at 7:00

4 votes

Accepted

Is it possible to auto mount entire truecrypt drive

disk-encryption

answered Dec 28, 2011 at 14:11

4 votes

Primary Key as Salt?

cryptography encryption passwords

answered May 29, 2011 at 19:35

3 votes

Why re-verify with CAPTCHA on failed form entry?

captcha

answered Apr 25, 2011 at 8:08

3 votes

Should I obfuscate passwords before hashing? Should I pre-hash them on the client? What about salts?

passwords password-management

answered Apr 25, 2011 at 19:26

3 votes

Accepted

Are there any hardware encryption solutions for my notebook?

disk-encryption

answered Jun 9, 2011 at 10:58

2 votes

What is the best way to hand out passwords to a widely spread diverse employee base?

passwords password-management password-policy

answered Jan 27, 2012 at 11:51

Stack Exchange Network

current community

your communities

more stack exchange communities

33 Answers

Password Hashing: add salt + pepper or is salt enough?

Is it enough to only wipe a flash drive once?

Open Source vs Closed Source Systems

Why is HTTPS not the default protocol?

What should be used as a salt?

Most secure password hash algorithm(s)?

ATA security erase on SSD

how long does it take to actually generate rainbow tables?

How can crackers reconstruct 200k salted password hashes so fast?

Does compiling from sources "kinda" protects from buffer overflow attacks?

What are the pros and cons of site wide SSL (https)?

How do I secure my login page?

Repairing corrupt TrueCrypt volumes/disks?

DDoS Protection for DNS providers

How do I securely exchange server logins with remote developers?

Is NTP vulnerable to DNS poisoning or spoofing attacks?

Can anyone provide references for implementing web application self password reset mechanisms properly?

Encrypting files in a windows environment

Best practices for securing an iPhone

How to handle security issues of someone else's website

Nested Truecrypt containers

Share certain information only after death

Increase the security of an already stored password hash

Completely wiping a HDD (i.e. nothing is recoverable)

Is it possible to auto mount entire truecrypt drive

Primary Key as Salt?

Why re-verify with CAPTCHA on failed form entry?

Should I obfuscate passwords before hashing? Should I pre-hash them on the client? What about salts?

Are there any hardware encryption solutions for my notebook?

What is the best way to hand out passwords to a widely spread diverse employee base?