As of May 31, 2023, we have updated our Code of Conduct.
user's user avatar
user's user avatar
user's user avatar
user
  • Member for 12 years, 1 month
  • Last seen more than 1 year ago
296 votes
Accepted

Should I be concerned if the "FBI" has logged onto my Ubuntu VPS?

50 votes

SSH - If Eve has the passphrase and public key, can she derive the private key?

44 votes
Accepted

Cryptography that looks like ordinary email

41 votes

Encrypting a few TB of Data

24 votes
Accepted

Convert SHA-256 to SHA-1 and MD5 - Increase bit length/entropy?

19 votes

What does EIP stand for?

18 votes
Accepted

Recommended level of password complexity for Keepass

17 votes
Accepted

Is there a common best practice for naming public and private PGP keys when exporting them?

16 votes

Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?

14 votes

Why is STARTTLS used when it can be downgraded very easily?

13 votes

How do I check that users don't write down their passwords?

12 votes

How to store passwords written on a physical notebook?

11 votes
Accepted

ProtonMail security concerns

11 votes
Accepted

What's the chance of two PGP keys being exactly identical?

11 votes

Why is some meta data not encrypted in Proton Mail?

11 votes
Accepted

Self-signed certificate for a IdP-initiated SAML SSO

10 votes

Why do people think that this is bad way to hash passwords?

9 votes
Accepted

Is firefox disabling of insecure TLS fallback part of the HSTS spec?

9 votes

Is an 80 bit password good enough for all practical purposes?

9 votes

Am I affected by the Intel AMT/ISM/SBT escalation of privilege vulnerability?

8 votes

Is it safe to store my passwords in a text document protected by a password?

8 votes
Accepted

How to see when a HSTS domain is about to expire?

8 votes

Is there any way to determine the location of a laptop based on its MAC address or serial number?

7 votes

How do I know my tools aren't compromised?

7 votes

Why not use larger cipher keys?

6 votes

Can an attack that does not change the server state be considered a CSRF attack?

5 votes
Accepted

Is signing an encrypted PGP message redundant?

5 votes
Accepted

In PGP how can I be sure about the public key?

5 votes

Is encryption key length limitations by governments norm?

5 votes
Accepted

browser can visit the url but other application can't