Skip to main content
Yoav Aner's user avatar
Yoav Aner's user avatar
Yoav Aner's user avatar
Yoav Aner
  • Member for 12 years, 5 months
  • Last seen more than 4 years ago
27 votes
Accepted

How to store IV and key temporarily but securely

14 votes

How hard is it to intercept SMS (two-factor authentication)?

13 votes

How do I use Markdown securely?

12 votes
Accepted

Storage of 'secrets', keystores, HSMs and the rest

10 votes
Accepted

SSL fingerprint inconsistency: what does it mean?

10 votes

Is there any reason to show the same message for invalid username as password?

10 votes

What is the DUKPT Key Derivation Function?

9 votes
Accepted

can ssh passwordless public key authentication be ok if combined with a VPN?

8 votes
Accepted

Legitimately using tools like Havij

8 votes
Accepted

If a router has port 5060 open, and I know that there is unencrypted SIP traffic going through this port, how could one take advantage of this

8 votes

Is there any security risk in storing hashed variations of passwords?

8 votes

Are there DRM techniques to effectively prevent pirating?

8 votes

What do I need to configure, to make sure my software uses /dev/urandom?

7 votes
Accepted

Covert Channels Exploit and the Bell-LaPadula MAC Model

7 votes

Security issues with PHP Sandbox

7 votes
Accepted

“Double hashing” with 2 different hash functions

7 votes
Accepted

Does installing Apache on my local machine create new security risks?

7 votes

Recommended Cipher Suites for TLS 1.0, 1.1 and 1.2

6 votes

Keyloggers on Smartphones?

6 votes

Is it still unsafe to email credit card number nowadays?

5 votes
Accepted

Hybrid key management doing it wrong?

5 votes

How secure is TOTP key on phones?

5 votes
Accepted

Does signing my e-mail with DKIM imply non-repudiation for all my users?

5 votes
Accepted

Is there any security risk in storing hashed variations of passwords?

5 votes

How to test for the BEAST attack if server isn't Internet-connected?

5 votes

Reverse-engineering one-time passwords for two-factor authentication systems

5 votes
Accepted

Is email between 2 parties secure if both mailboxes are on the same server and both clients use SSL?

5 votes
Accepted

How much security should I use for my web application?

5 votes
Accepted

Circumventing Device Fingerprinting

5 votes
Accepted

Mobile OTP - Secure?