User Kevin Li

207 votes

4 answers

64k views

Is a rand from /dev/urandom secure for a login key?

Incognito

5,184

asked May 18, 2011 at 19:47

195 votes

4 answers

50k views

Amount of simple operations that is safely out of reach for all humanity?

cryptography research theory

Nakedible

4,521

asked Aug 11, 2011 at 17:35

186 votes

6 answers

33k views

How do I deal with a compromised server?

system-compromise

Lucas Kauffman

54.1k

asked Jul 19, 2013 at 17:40

184 votes

5 answers

235k views

How and when do I use HMAC?

hmac

user5575

asked Sep 13, 2012 at 11:22

169 votes

7 answers

98k views

Difference Between OAUTH, OpenID and OPENID Connect in very simple term?

authentication oauth authorization openid openid-connect

user960567

2,461

asked Oct 29, 2013 at 13:31

166 votes

10 answers

24k views

How do you explain the necessity of "nuke it from orbit" to management and users?

malware antivirus risk-management user-education system-compromise

Polynomial

132k

asked Nov 19, 2012 at 13:59

89 votes

9 answers

22k views

Hardening Linux Server

operating-systems configuration linux hardening

Mark Davidson

9,357

asked Dec 6, 2010 at 10:04

87 votes

5 answers

38k views

Are all SSL Certificates equal?

tls certificates certificate-authority

Kyle Rosendo

3,955

asked Apr 4, 2012 at 7:21

67 votes

3 answers

9k views

Heartbleed: Why does the client supply the length of the message at all?

tls openssl heartbleed design-flaw

Elliot

753

asked Apr 12, 2014 at 18:25

66 votes

4 answers

7k views

What is the point of gibberish spam

spam

Hot Licks

917

asked Mar 11, 2012 at 3:51

59 votes

4 answers

28k views

Does Heartbleed mean new certificates for every SSL server?

tls openssl heartbleed

Naftuli Kay

6,705

asked Apr 8, 2014 at 3:10

57 votes

11 answers

14k views

Are there "secure" languages? [closed]

threat-mitigation programming secure-coding

TruthOf42

835

asked Apr 14, 2014 at 13:01

53 votes

9 answers

56k views

Feeding /dev/random entropy pool?

cryptography passwords random

tkit

3,272

asked Nov 11, 2010 at 23:41

49 votes

6 answers

13k views

Site is being redirected to Viagra store; all the usual suspects turn up nothing

url-redirection

Lew

591

asked Apr 25, 2014 at 13:23

48 votes

4 answers

50k views

Is using SHA-512 for storing passwords tolerable?

passwords

Bozho

1,173

asked Feb 22, 2014 at 8:23

47 votes

5 answers

14k views

Migrating GPG master keys as subkeys to new master key

key-management pgp gnupg

lz.

571

asked Mar 20, 2013 at 17:31

39 votes

1 answer

11k views

Why can't I use the same key for encryption and MAC?

encryption hmac

Brendan Long

2,878

asked Jun 22, 2013 at 17:27

36 votes

4 answers

30k views

How can I encrypt a file using gpg without including the recipient's key ID?

privacy pgp gnupg

Flimm

1,230

asked Dec 8, 2012 at 20:35

30 votes

7 answers

2k views

Protecting critical state infrastructure from the aftermath of a nuclear blast

physical government apt

Polynomial

132k

asked Aug 13, 2012 at 14:19

23 votes

3 answers

16k views

Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?

disk-encryption hardware opensource opal-2.0

neitsab

343

asked Nov 15, 2013 at 17:57

19 votes

6 answers

1k views

Is there anything standing in the way of email encryption going mainstream? [closed]

encryption email pgp

Jason

1,309

asked Apr 18, 2014 at 11:33

17 votes

3 answers

7k views

Using file extension and MIME type (as output by file -i -b) combination to determine unsafe files?

appsec web-application file-types file-upload

siliconpi

1,087

asked Sep 24, 2011 at 10:44

16 votes

2 answers

9k views

How to change (sub)key usage of a PGP key?

key-management pgp gnupg key-usage

Tobias Kienzler

7,578

asked Feb 27, 2013 at 14:58

8 votes

2 answers

5k views

gpg --perfect-code

pgp

user195971

81

asked Feb 7, 2013 at 9:22

4 votes

4 answers

17k views

SQL Injection via Unicode

sql-injection injection asp.net sql-server unicode

Cyassin

503

asked Apr 2, 2014 at 22:38

3 votes

1 answer

191 views

What can be done to prevent disruption of hardware in the event of a powerful solar flare?

physical

Kat

411

asked Apr 3, 2014 at 19:50

Stack Exchange Network

current community

your communities

more stack exchange communities

26 Bookmarks

Is a rand from /dev/urandom secure for a login key?

Amount of simple operations that is safely out of reach for all humanity?

How do I deal with a compromised server?

How and when do I use HMAC?

Difference Between OAUTH, OpenID and OPENID Connect in very simple term?

How do you explain the necessity of "nuke it from orbit" to management and users?

Hardening Linux Server

Are all SSL Certificates equal?

Heartbleed: Why does the client supply the length of the message at all?

What is the point of gibberish spam

Does Heartbleed mean new certificates for every SSL server?

Are there "secure" languages? [closed]

Feeding /dev/random entropy pool?

Site is being redirected to Viagra store; all the usual suspects turn up nothing

Is using SHA-512 for storing passwords tolerable?

Migrating GPG master keys as subkeys to new master key

Why can't I use the same key for encryption and MAC?

How can I encrypt a file using gpg without including the recipient's key ID?

Protecting critical state infrastructure from the aftermath of a nuclear blast

Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?

Is there anything standing in the way of email encryption going mainstream? [closed]

Using file extension and MIME type (as output by file -i -b) combination to determine unsafe files?

How to change (sub)key usage of a PGP key?

gpg --perfect-code

SQL Injection via Unicode

What can be done to prevent disruption of hardware in the event of a powerful solar flare?