User 700 Software - Information Security Stack Exchange

700 Software

Member for 12 years, 9 months
Last seen more than 1 year ago

Twitter
GitHub
700.social
Chattanooga, Tennessee, USA

166 Answers

Score Activity Newest

85 votes

Accepted

How to prove that authentication system works, and that the customer is using the wrong password?

answered Nov 9, 2016 at 16:14

64 votes

Is there a way to prove that HTTPS is encrypting the communication with my site?

answered Oct 5, 2016 at 19:41

64 votes

Why does one need a strong password on Unix?

answered Jan 29, 2017 at 19:29

54 votes

Is it a bad idea to bypass login wall for a specified IP address?

answered Aug 24, 2016 at 12:04

39 votes

What is worse for password strength, a poor password policy or no password policy at all?

answered Jul 26, 2016 at 15:30

38 votes

Accepted

Is Windows 10 backup safe from ransomware?

answered Aug 2, 2016 at 15:40

38 votes

What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?

answered Aug 8, 2016 at 14:50

30 votes

Is it safe to use cheap USB data cables?

answered Nov 4, 2016 at 15:57

29 votes

Is it dangerous to compile arbitrary C?

answered Oct 6, 2016 at 3:01

27 votes

Accepted

How to approach replacing md5 for transporting Unity game data to a remote server

answered Jan 2, 2017 at 22:24

26 votes

Accepted

Best practices for hardening sudo?

answered Aug 30, 2016 at 14:22

26 votes

Accepted

How to make secure communication between servers

answered May 31, 2016 at 17:54

25 votes

How can PayPal spoof emails so easily to say it comes from someone else?

answered Dec 6, 2011 at 16:33

25 votes

Securing a LAN that has multiple exposed external Cat 6 cable runs?

answered Oct 31, 2016 at 15:58

25 votes

Accepted

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

answered Jan 23, 2017 at 16:27

21 votes

Does anybody not store salts?

answered Jul 15, 2016 at 13:37

19 votes

Accepted

Hashing Password on Client Side to avoid lag on single-core game server?

answered Jan 17, 2017 at 14:30

16 votes

Why does HSTS not automatically apply to subdomains to enhance security? For what reason would someone not want HSTS on every subdomain?

answered Oct 28, 2016 at 14:04

15 votes

Accepted

Why is MD5 considered a vulnerable algorithm?

answered Sep 30, 2016 at 16:30

15 votes

What are the security benefits to a separate user database?

answered Jan 2, 2012 at 21:42

13 votes

Accepted

Is it more secure for SSH clients to use a Private Key (RSA-2048) or a long random password (256 bits of entropy)?

answered Feb 15, 2017 at 18:30

12 votes

Is it safer to use a port other than 21 for FTP?

answered Aug 18, 2016 at 14:18

9 votes

SQL field level encryption, how safe is it?

answered Apr 7, 2012 at 0:08

9 votes

Accepted

Implementing an autologin link in an email

answered Jul 12, 2016 at 12:29

8 votes

Force a user to HTTPS

answered Sep 22, 2016 at 13:50

8 votes

Accepted

How to protect API Key in Android application

answered Nov 17, 2016 at 16:00

7 votes

Storing application secrets safely on Linux

answered Nov 9, 2016 at 22:27

7 votes

Does insert only db access offer any additional security

answered Oct 5, 2016 at 13:15

7 votes

Split RSA private key into two parts securely

answered Sep 5, 2016 at 12:11

7 votes

JavaScript written only with brackets?

answered Dec 14, 2011 at 22:55

1