User Jeff Ferland - Information Security Stack Exchange

Jeff Ferland

Moderator

Member for 12 years, 11 months
Last seen more than a week ago

Twitter
GitHub
storyinmemo.com
San Francisco, CA

422 Answers

Score Activity Newest

4 votes

How to get hold of and use WPA session keys?

answered Jun 10, 2011 at 15:52

1 vote

What is the best way of securing a website logon without SSL or preshared keys?

answered Nov 15, 2011 at 21:40

18 votes

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

answered Aug 15, 2011 at 19:55

9 votes

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

answered Jan 25, 2022 at 12:43

0 votes

Can I evaluate the quality of my OS random numbers?

answered Dec 6, 2021 at 4:26

57 votes

Accepted

PBKDF2 usage will slow REST API down?

answered Mar 13, 2021 at 21:42

39 votes

How do very big companies manage their most important passwords / keys?

answered Jul 28, 2020 at 23:29

14 votes

Is revealing the phone number during OTP verification process considered a vulnerability?

answered Jul 14, 2020 at 18:17

21 votes

Is cell phone number based verification secure?

answered Jul 14, 2020 at 5:03

7 votes

Accepted

what is the difference between boot-sector virus and rootkits?

answered Nov 19, 2012 at 6:13

2 votes

Best practices to prevent logging of LDAP credentials by intermediate apps

answered Mar 25, 2019 at 21:45

6 votes

Accepted

Is Tor used to perform hostile hacking?

answered Oct 6, 2012 at 19:43

10 votes

How does Tor protect against fake entry nodes / total redirection?

answered Dec 4, 2012 at 18:56

0 votes

How can AWS API Gateway be used to rapidly rotate credentials in this fashion?

answered Oct 11, 2018 at 17:30

1 vote

How were Facebook accounts compromised?

answered Sep 28, 2018 at 21:50

2 votes

How can I verify signed commits made by other people?

answered Sep 13, 2018 at 23:07

9 votes

Would you go with SSD or Disk Hard Drive?

answered Sep 19, 2011 at 2:59

19 votes

Is an AWS "Access Key ID" a secret?

answered Jun 18, 2018 at 23:37

6 votes

Accepted

How does gpg decryption command know which key in a key ring to use

answered Apr 8, 2018 at 3:03

6 votes

School Wifi Certificate

answered Feb 16, 2018 at 20:45

1 vote

Accepted

Security of a Unity 2017 Cache Server

answered Feb 1, 2018 at 3:47

3 votes

How to securely store and manage one-time backup codes for 2FA?

answered Nov 6, 2015 at 0:07

2 votes

Best Practice for MFA on Root AWS Accounts

answered Aug 9, 2017 at 19:19

2 votes

What is an actual hardware firewall?

answered Jul 24, 2017 at 7:27

7 votes

Accepted

How to implement multi factor authentication using a token generator?

answered Oct 10, 2011 at 13:38

0 votes

Anonymity of ballots when voting with BYCRYPT hashes

answered Mar 10, 2017 at 21:02

6 votes

How to securely hash/tokenize a string

answered Feb 28, 2017 at 23:01

48 votes

Accepted

What's the Impact of the CloudFlare Reverse Proxy Bug? ("#CloudBleed")

answered Feb 24, 2017 at 3:18

0 votes

Security and conventions. DB or File?

answered Feb 22, 2017 at 22:34

4 votes

ASLR in Linux does not randomize libraries separately

answered Nov 22, 2016 at 19:43

1

2 3 4 5

…