User 700 Software

27 votes

Accepted

How to approach replacing md5 for transporting Unity game data to a remote server

answered Jan 2, 2017 at 22:24

6 votes

Accepted

Any advantage to rejecting a (cell phone) call vs ignoring it?

answered Mar 8, 2017 at 1:03

13 votes

Accepted

Is it more secure for SSH clients to use a Private Key (RSA-2048) or a long random password (256 bits of entropy)?

answered Feb 15, 2017 at 18:30

1 vote

How can ssh defend against timing analysis attacks?

answered Feb 9, 2017 at 20:03

6 votes

Accepted

Unencrypted passwords in a system considered a vulnerability?

answered Jan 29, 2017 at 2:22

64 votes

Why does one need a strong password on Unix?

answered Jan 29, 2017 at 19:29

3 votes

Can another user on the same computer access my accounts if I tick "keep me signed in"?

answered Jan 27, 2017 at 17:48

4 votes

Accepted

Can encryption really be "overcome" (by government) and how?

answered Jan 24, 2017 at 19:24

25 votes

Accepted

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

answered Jan 23, 2017 at 16:27

4 votes

Subdomains - Security Risk?

answered Jan 20, 2017 at 20:37

19 votes

Accepted

Hashing Password on Client Side to avoid lag on single-core game server?

answered Jan 17, 2017 at 14:30

2 votes

What algorithm to use for Java object encryption?

answered Jan 9, 2017 at 22:33

1 vote

Accepted

Veracrypt - When using Full OS encryption, isn't it easier to decrypt using the OS file placement?

answered Jan 5, 2017 at 21:22

4 votes

Accepted

Is there a best practice for storing passwords in a two way encryption?

answered Jan 3, 2017 at 22:02

9 votes

SQL field level encryption, how safe is it?

answered Apr 7, 2012 at 0:08

7 votes

Could hashing prevent SQL injection?

answered Dec 19, 2016 at 16:16

2 votes

What would be the effects of a limited Russian/US cyber conflict be on cyber-security professionals?

answered Dec 16, 2016 at 17:05

0 votes

DDoS: A protocol where the victim says "Don't send me traffic for N ms"?

answered Dec 9, 2016 at 0:16

4 votes

Accepted

Subdomain Takeover

answered Dec 7, 2016 at 16:22

3 votes

Is it secure to store the salt along with the hashed password in the database?

answered Nov 28, 2016 at 17:39

2 votes

Is there a way to check whether the application saves password in clear text or in hashed format?

answered Nov 21, 2016 at 19:01

3 votes

AES Encryption random IV per file

answered Nov 21, 2016 at 18:02

2 votes

Accepted

How to protect against leaking Google Drive synced files from a stolen laptop?

answered Nov 18, 2016 at 18:33

2 votes

Accepted

Is it secure to use unique prefix for each dataset, instead of using IV (in AES)?

answered Nov 17, 2016 at 13:48

4 votes

Accepted

How to prevent user guess the key (password), if he have access to all the data (except the key)

answered Nov 16, 2016 at 15:56

8 votes

Accepted

How to protect API Key in Android application

answered Nov 17, 2016 at 16:00

1 vote

Encrypted cookie to prevent csrf attacks

answered Nov 15, 2016 at 22:39

3 votes

Accepted

Strong PHP hashing without salt

answered Nov 15, 2016 at 14:31

0 votes

How to prove that authentication system works, and that the customer is using the wrong password?

answered Nov 10, 2016 at 18:58

7 votes

Storing application secrets safely on Linux

answered Nov 9, 2016 at 22:27

Stack Exchange Network

166 Answers

How to approach replacing md5 for transporting Unity game data to a remote server

Any advantage to rejecting a (cell phone) call vs ignoring it?

Is it more secure for SSH clients to use a Private Key (RSA-2048) or a long random password (256 bits of entropy)?

How can ssh defend against timing analysis attacks?

Unencrypted passwords in a system considered a vulnerability?

Why does one need a strong password on Unix?

Can another user on the same computer access my accounts if I tick "keep me signed in"?

Can encryption really be "overcome" (by government) and how?

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

Subdomains - Security Risk?

Hashing Password on Client Side to avoid lag on single-core game server?

What algorithm to use for Java object encryption?

Veracrypt - When using Full OS encryption, isn't it easier to decrypt using the OS file placement?

Is there a best practice for storing passwords in a two way encryption?

SQL field level encryption, how safe is it?

Could hashing prevent SQL injection?

What would be the effects of a limited Russian/US cyber conflict be on cyber-security professionals?

DDoS: A protocol where the victim says "Don't send me traffic for N ms"?

Subdomain Takeover

Is it secure to store the salt along with the hashed password in the database?

Is there a way to check whether the application saves password in clear text or in hashed format?

AES Encryption random IV per file

How to protect against leaking Google Drive synced files from a stolen laptop?

Is it secure to use unique prefix for each dataset, instead of using IV (in AES)?

How to prevent user guess the key (password), if he have access to all the data (except the key)

How to protect API Key in Android application

Encrypted cookie to prevent csrf attacks

Strong PHP hashing without salt

How to prove that authentication system works, and that the customer is using the wrong password?

Storing application secrets safely on Linux