user avatar
user avatar
user avatar
700 Software
  • Member for 11 years, 6 months
  • Last seen more than a month ago
85 votes
Accepted

How to prove that authentication system works, and that the customer is using the wrong password?

64 votes

Why does one need a strong password on Unix?

63 votes

Is there a way to prove that HTTPS is encrypting the communication with my site?

54 votes

Is it a bad idea to bypass login wall for a specified IP address?

39 votes

What is worse for password strength, a poor password policy or no password policy at all?

38 votes
Accepted

Is Windows 10 backup safe from ransomware?

37 votes

What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?

30 votes

Is it safe to use cheap USB data cables?

29 votes

Is it dangerous to compile arbitrary C?

27 votes
Accepted

How to approach replacing md5 for transporting Unity game data to a remote server

26 votes
Accepted

Best practices for hardening sudo?

26 votes
Accepted

How to make secure communication between servers

25 votes

How can PayPal spoof emails so easily to say it comes from someone else?

25 votes

Securing a LAN that has multiple exposed external Cat 6 cable runs?

25 votes
Accepted

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

21 votes

Does anybody not store salts?

19 votes
Accepted

Hashing Password on Client Side to avoid lag on single-core game server?

16 votes

Why does HSTS not automatically apply to subdomains to enhance security? For what reason would someone not want HSTS on every subdomain?

15 votes

What are the security benefits to a separate user database?

13 votes
Accepted

Why is MD5 considered a vulnerable algorithm?

13 votes
Accepted

Is it more secure for SSH clients to use a Private Key (RSA-2048) or a long random password (256 bits of entropy)?

12 votes

Is it safer to use a port other than 21 for FTP?

9 votes

SQL field level encryption, how safe is it?

9 votes
Accepted

Implementing an autologin link in an email

8 votes

Force a user to HTTPS

8 votes
Accepted

How to protect API Key in Android application

7 votes

Does insert only db access offer any additional security

7 votes

Split RSA private key into two parts securely

7 votes

JavaScript written only with brackets?

7 votes

List of vulnerable and "usable" hash functions

1
2 3 4 5 6