User Jeff Ferland - Information Security Stack Exchange

Jeff Ferland

Moderator

Member for 12 years, 11 months
Last seen more than a week ago

Twitter
GitHub
storyinmemo.com
San Francisco, CA

422 Answers

Score Activity Newest

9 votes

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

answered Jan 25, 2022 at 12:43

0 votes

Can I evaluate the quality of my OS random numbers?

answered Dec 6, 2021 at 4:26

57 votes

Accepted

PBKDF2 usage will slow REST API down?

answered Mar 13, 2021 at 21:42

39 votes

How do very big companies manage their most important passwords / keys?

answered Jul 28, 2020 at 23:29

14 votes

Is revealing the phone number during OTP verification process considered a vulnerability?

answered Jul 14, 2020 at 18:17

21 votes

Is cell phone number based verification secure?

answered Jul 14, 2020 at 5:03

2 votes

Best practices to prevent logging of LDAP credentials by intermediate apps

answered Mar 25, 2019 at 21:45

0 votes

How can AWS API Gateway be used to rapidly rotate credentials in this fashion?

answered Oct 11, 2018 at 17:30

1 vote

How were Facebook accounts compromised?

answered Sep 28, 2018 at 21:50

2 votes

How can I verify signed commits made by other people?

answered Sep 13, 2018 at 23:07

19 votes

Is an AWS "Access Key ID" a secret?

answered Jun 18, 2018 at 23:37

6 votes

Accepted

How does gpg decryption command know which key in a key ring to use

answered Apr 8, 2018 at 3:03

6 votes

School Wifi Certificate

answered Feb 16, 2018 at 20:45

1 vote

Accepted

Security of a Unity 2017 Cache Server

answered Feb 1, 2018 at 3:47

2 votes

Best Practice for MFA on Root AWS Accounts

answered Aug 9, 2017 at 19:19

2 votes

What is an actual hardware firewall?

answered Jul 24, 2017 at 7:27

0 votes

Anonymity of ballots when voting with BYCRYPT hashes

answered Mar 10, 2017 at 21:02

6 votes

How to securely hash/tokenize a string

answered Feb 28, 2017 at 23:01

48 votes

Accepted

What's the Impact of the CloudFlare Reverse Proxy Bug? ("#CloudBleed")

answered Feb 24, 2017 at 3:18

0 votes

Security and conventions. DB or File?

answered Feb 22, 2017 at 22:34

4 votes

ASLR in Linux does not randomize libraries separately

answered Nov 22, 2016 at 19:43

1 vote

Does YubiKey with LastPass influence encryption?

answered Oct 4, 2016 at 19:10

4 votes

How to tell if an email is encrypted, or just corrupted?

answered May 23, 2016 at 4:48

3 votes

Are there any risks associated with importing metadata?

answered Feb 22, 2016 at 3:41

1 vote

Accepted

Personal Cloud Storage vs. File Sharing Services

answered Feb 11, 2016 at 15:38

1 vote

What is the safest way to store passwords in a company for the case when the CISO leaves?

answered Feb 3, 2016 at 18:05

12 votes

Why is leaving a passworded SSH over the internet so bad?

answered Feb 2, 2016 at 19:09

0 votes

Best Security Method for SSH Access

answered Jan 27, 2016 at 17:35

2 votes

Can I prevent all employees from accessing customer data without being logged (especially IT)

answered Jan 27, 2016 at 16:07

13 votes

Accepted

Is it ok to have self-signed certificates in source control?

answered Jan 26, 2016 at 22:47

1

2 3 4 5

…