Andrew Hoffman's user avatar
Andrew Hoffman's user avatar
Andrew Hoffman's user avatar
Andrew Hoffman
  • Member for 10 years, 4 months
  • Last seen more than 2 years ago
57 votes

Why must I have a "strong" password for sites like this?

22 votes
Accepted

What is the difference between login throttling and temporary account lockout?

5 votes

How can a passphrase with 256 bits of entropy practically be constructed & memorized?

5 votes

Is it a security risk to use an unknown web browser?

4 votes

Is an 80 bit password good enough for all practical purposes?

4 votes

Does the average user really need a password manager?

4 votes

Password protect an excel file for a period of time?

4 votes

Image file as password alternative

3 votes

Why does saving a salt as plain text still improve security?

3 votes

What would be a good way to send sensitive information to users that are not very tech-savvy?

3 votes

Is it safe to use PBKDF2 for hashing?

3 votes
Accepted

How to respond to Cyber Bullying?

3 votes

Website Defacing without hacking (google issue or trick?)

2 votes
Accepted

How to deal with password schemes that can produce weak passwords?

2 votes

What are the weaknesses of my authentication scheme?

2 votes

How and why does not having https allow people to trace my browsing habits if at home?

2 votes

When do governments allow export of cryptography software?

2 votes

Password reset system code system vs long hash

2 votes

How can I protect my computer from my potentially malicious colleagues?

2 votes

MD5 security concerns in download verification

2 votes

what is the difference between dll hooking and dll injection

2 votes

Protect against clickjacking but allow framing on domain?

2 votes
Accepted

Why POODLE vulnerability has for each byte a probability of 1/256 to get it in plaintext?

1 vote

LastPass Bootstrap on New Android Phone

1 vote

Can you have Secure encryption with a backdoor, and still be secure?

1 vote

About SHA1 in default Disk Encryption in Linux

1 vote

Why is security through obscurity not a good option for encryption?

1 vote

Should I add protections where I dont understand how hacker can break system?

1 vote

XSS with input in onclick attribute

1 vote

In two step authentication, should I check step 1 before proceeding to step 2 or check both at the end?