User Josef

99 votes

Accepted

What is worse for password strength, a poor password policy or no password policy at all?

answered Jul 26, 2016 at 14:42

49 votes

How to securely dispose of a smartphone?

answered Jun 25, 2019 at 8:04

46 votes

Accepted

Is a standalone phone number considered Personally Identifiable Information?

answered Jul 3, 2018 at 8:49

33 votes

Sql database password encryption opinion needed

answered Sep 12, 2016 at 10:16

27 votes

Accepted

Is privacy compromised when sharing SHA-1 hashed URLs?

answered Nov 8, 2016 at 8:10

22 votes

How to use FDE without needing to share the encryption password

answered Nov 6, 2019 at 11:59

20 votes

Accepted

How safe are Wi-Fi Hotspots? Because WPA 2 is compromised, is there any other security protocol for Wi-Fi?

answered Nov 22, 2016 at 11:11

19 votes

How to handle refresh tokens

answered Oct 18, 2018 at 11:25

16 votes

Accepted

Is it safe to let apt-get applications install root certificates?

answered Aug 16, 2016 at 9:31

16 votes

As a contractor how do I work on multiple client networks without data leakage?

answered Sep 16, 2020 at 8:28

12 votes

Accepted

Drill a (physical) hole on a g10 openpgp smart card

answered Jan 21, 2016 at 9:43

10 votes

Do I have to hash users' IP addresses when I log them?

answered Dec 3, 2014 at 13:15

10 votes

How secure is using your fingerprint for password against opportunist thieves?

answered Oct 5, 2016 at 14:43

7 votes

Securing Apartment Wifi

answered Jun 5, 2018 at 14:56

6 votes

Accepted

Perfect forward secrecy using XOR

answered Mar 15, 2017 at 14:33

6 votes

Securing data and files so as they won't be openable anywhere else but your own server?

answered Nov 7, 2016 at 10:55

6 votes

Why don't CAs sell certificates as files, instead of hardware or as a service?

answered Apr 9, 2019 at 11:52

5 votes

Can we drop XP from HTTPS support? If not, when?

answered Jan 18, 2016 at 13:21

4 votes

Why are CA-issued certificates considered so much more secure than self-signed certificates

answered Aug 20, 2015 at 9:55

4 votes

Skill testing question in registration page

answered Nov 29, 2016 at 12:14

4 votes

Strength of RSA encryption with or without a public key

answered Aug 2, 2016 at 15:11

4 votes

Decryption given the first few characters of the decrypted file

answered Sep 12, 2016 at 10:26

4 votes

Accepted

TrueCrypt FDE Password Recovery

answered Sep 19, 2016 at 14:14

4 votes

Accepted

Can a smartphone user prevent Google / Apple / Microsoft from finding out where s/he is? If yes, how?

answered Sep 26, 2016 at 10:19

4 votes

OTP generation is specific to SIM or Phone number

answered Jun 19, 2018 at 13:40

4 votes

Could a state actor MITM Let’s Encrypt certificate issuance to provide a cert they could more easily crack

answered Mar 12, 2018 at 9:02

4 votes

Embedded Linux: Is removing SSH alone good enough to ensure security of file system?

answered Jul 12, 2018 at 10:19

4 votes

What is the standard practice to maintain a password for different websites?

answered Nov 12, 2018 at 10:22

4 votes

Is that a good idea? - Firefox/Chrome in-content encryption

answered Mar 22, 2019 at 11:22

4 votes

What is the purpose of anti-rollback protection in IoT devices?

answered Jun 23, 2020 at 9:02

Stack Exchange Network

91 Answers

What is worse for password strength, a poor password policy or no password policy at all?

How to securely dispose of a smartphone?

Is a standalone phone number considered Personally Identifiable Information?

Sql database password encryption opinion needed

Is privacy compromised when sharing SHA-1 hashed URLs?

How to use FDE without needing to share the encryption password

How safe are Wi-Fi Hotspots? Because WPA 2 is compromised, is there any other security protocol for Wi-Fi?

How to handle refresh tokens

Is it safe to let apt-get applications install root certificates?

As a contractor how do I work on multiple client networks without data leakage?

Drill a (physical) hole on a g10 openpgp smart card

Do I have to hash users' IP addresses when I log them?

How secure is using your fingerprint for password against opportunist thieves?

Securing Apartment Wifi

Perfect forward secrecy using XOR

Securing data and files so as they won't be openable anywhere else but your own server?

Why don't CAs sell certificates as files, instead of hardware or as a service?

Can we drop XP from HTTPS support? If not, when?

Why are CA-issued certificates considered so much more secure than self-signed certificates

Skill testing question in registration page

Strength of RSA encryption with or without a public key

Decryption given the first few characters of the decrypted file

TrueCrypt FDE Password Recovery

Can a smartphone user prevent Google / Apple / Microsoft from finding out where s/he is? If yes, how?

OTP generation is specific to SIM or Phone number

Could a state actor MITM Let’s Encrypt certificate issuance to provide a cert they could more easily crack

Embedded Linux: Is removing SSH alone good enough to ensure security of file system?

What is the standard practice to maintain a password for different websites?

Is that a good idea? - Firefox/Chrome in-content encryption

What is the purpose of anti-rollback protection in IoT devices?