User Jeff Ferland - Information Security Stack Exchange

Jeff Ferland

Moderator

Member for 12 years, 9 months
Last seen more than a week ago

Twitter
GitHub
storyinmemo.com
San Francisco, CA

422 Answers

Score Activity Newest

18 votes

Accepted

I had SSL certificate on my site but still it has been hacked...how to prevent this from happening?

answered Sep 3, 2011 at 7:03

18 votes

Accepted

What is an SSL certificate intended to prove, and how does it do it?

answered Aug 31, 2011 at 15:02

18 votes

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

answered Aug 15, 2011 at 19:55

18 votes

Accepted

What programming language is Stuxnet written in?

answered Sep 26, 2011 at 18:19

18 votes

Accepted

How reliable is a write protection switch on a USB flash drive?

answered Jun 2, 2011 at 13:25

18 votes

Accepted

Is WPA2 WiFi protected against ARP poisoning and sniffing?

answered Mar 3, 2011 at 18:57

18 votes

Is an AWS "Access Key ID" a secret?

answered Jun 18, 2018 at 23:37

18 votes

Accepted

NOPS in Metasploit

answered Feb 7, 2013 at 22:10

17 votes

How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext?

answered Jun 27, 2011 at 16:06

17 votes

Accepted

Are some uncommon TCP ports scanned less than others?

answered Jul 29, 2011 at 15:12

17 votes

Accepted

How to simulate DDoS attacks from the Internet?

answered Oct 12, 2011 at 15:33

17 votes

Accepted

How serious are XSS attacks

answered Oct 21, 2011 at 16:06

17 votes

Accepted

Is there any legal reason to save a cleartext password?

answered Aug 2, 2011 at 15:44

17 votes

Accepted

If I have two identical linux virtual machine images, will they generate identical random numbers?

answered May 1, 2012 at 14:15

16 votes

How can I keep my identity anonymous as a website owner/administrator?

answered Dec 6, 2011 at 20:11

16 votes

Accepted

How to recover securely deleted data

answered Nov 16, 2011 at 22:53

16 votes

Accepted

TPM and storage of keys

answered Sep 10, 2012 at 18:24

16 votes

Accepted

How to detect eavesdropping by your ISP

answered Nov 27, 2012 at 6:24

16 votes

Is there a simple example of an Asymmetric encryption/decryption routine?

answered Sep 24, 2011 at 0:13

16 votes

Has anyone achieved PCI compliance on AWS?

answered Jul 31, 2011 at 21:35

16 votes

Accepted

Is there any point in using two step authentication if you have strong passwords?

answered Mar 10, 2015 at 17:55

16 votes

Accepted

Possible to read strength of encryption?

answered Nov 23, 2015 at 22:38

15 votes

How many OpenPGP keys should I make?

answered Jan 29, 2013 at 5:53

15 votes

GPU powered Password cracking machine - buy metal or cloud?

answered Nov 16, 2011 at 16:49

14 votes

How does the digital signature verification process work?

answered Oct 11, 2011 at 13:47

14 votes

How is an ATM secure?

answered Mar 20, 2013 at 15:25

14 votes

Is it possible to construct a passively self-destructing message?

answered Mar 6, 2015 at 19:31

14 votes

Is revealing the phone number during OTP verification process considered a vulnerability?

answered Jul 14, 2020 at 18:17

13 votes

How should I securely type a password in front of a lot of people?

answered Jan 15, 2016 at 16:09

13 votes

Accepted

Is it ok to have self-signed certificates in source control?

answered Jan 26, 2016 at 22:47

2

3 4 5

…