user avatar
user avatar
user avatar
MrWhite
  • Member for 11 years, 2 months
  • Last seen more than a month ago
1255 votes
3 answers
666k views

How does SSL/TLS work?

  • 132k
926 votes
11 answers
302k views

How to securely hash passwords?

  • 72.1k
617 votes
23 answers
150k views

How does changing your password every 90 days increase security?

597 votes
7 answers
206k views

How to store salt?

  • 6,157
574 votes
3 answers
519k views

What's the difference between SSL, TLS, and HTTPS?

  • 13k
563 votes
20 answers
86k views

How can I explain SQL injection without technical jargon?

  • 4,535
543 votes
11 answers
91k views

Is my developer's home-brew password security right or wrong, and why?

  • 4,699
311 votes
25 answers
48k views

Should I let my child's school have access to my kid's personal laptop?

  • 2,099
310 votes
16 answers
62k views

SQL injection is 17 years old. Why is it still around?

  • 2,603
306 votes
7 answers
44k views

Is it normal for auditors to require all company passwords?

  • 2,181
296 votes
10 answers
73k views

Why is Gbt3fC79ZmMEFUFJ a weak password?

  • 2,261
264 votes
7 answers
108k views

Password Hashing: add salt + pepper or is salt enough?

  • 7,372
262 votes
4 answers
163k views

How does Google Authenticator work?

260 votes
11 answers
38k views

How to explain Heartbleed without technical terms?

  • 3,233
248 votes
4 answers
112k views

SSL3 "POODLE" Vulnerability

  • 82.1k
241 votes
12 answers
28k views

Is single quote filtering nonsense?

  • 1,781
238 votes
7 answers
57k views

All 0s (zeros) in a bank card's CVC code

236 votes
11 answers
56k views

Why is Math.random() not designed to be cryptographically secure?

  • 64.1k
234 votes
15 answers
94k views

Where do you store your personal private GPG key?

229 votes
15 answers
44k views

Tracing the location of a mobile IP from an email

  • 1,681
226 votes
1 answer
90k views

How exactly does the OpenSSL TLS heartbeat (Heartbleed) exploit work?

223 votes
13 answers
27k views

Is there any reason to not show users incorrectly entered passwords after a successful login?

  • 2,043
202 votes
22 answers
27k views

How can I explain to non-techie friends that "cryptography is good"?

186 votes
6 answers
33k views

How do I deal with a compromised server?

186 votes
9 answers
25k views

Is the NHS wrong about passwords?

178 votes
12 answers
25k views

Why is it wrong to *implement* myself a known, published, widely believed to be secure crypto algorithm?

  • 5,607
168 votes
4 answers
36k views

What does it mean to "burn a zero-day"?

162 votes
2 answers
23k views

What is DROWN and how does it work?

  • 9,490
158 votes
5 answers
329k views

How does Amazon bill me without the CVC / CVV / CVV2?

  • 1,683
158 votes
8 answers
60k views

Is "Have I Been Pwned's" Pwned Passwords List really that useful?

  • 2,616
1
2 3 4 5
12