User Jeff Ferland - Information Security Stack Exchange

Jeff Ferland

Moderator

Member for 12 years, 11 months
Last seen more than a week ago

Twitter
GitHub
storyinmemo.com
San Francisco, CA

422 Answers

Score Activity Newest

13 votes

Are WPA2 connections with a shared key secure?

answered Nov 3, 2011 at 19:43

13 votes

Should usernames be kept secret?

answered Jun 23, 2011 at 16:40

13 votes

Accepted

Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

answered Jun 8, 2011 at 16:49

12 votes

Vuln research: reverse engineering, debugging or fuzzing?

answered Nov 8, 2011 at 13:21

12 votes

Does SSL/TLS (https) hide the urls being accessed

answered Sep 29, 2011 at 13:25

12 votes

Accepted

What can I do about TLS 1.0 javascript injection vulnerability on my server?

answered Sep 22, 2011 at 15:10

12 votes

How should hospitals handle the use of sharing credentials to access sensitive information, especially in critical situations?

answered Nov 29, 2011 at 21:58

12 votes

Accepted

Can you describe a real-life scenario of exploiting sticky bits?

answered Nov 21, 2011 at 19:35

12 votes

Why does OpenVPN require securely sharing certs with clients?

answered Mar 2, 2012 at 21:24

12 votes

Why is leaving a passworded SSH over the internet so bad?

answered Feb 2, 2016 at 19:09

12 votes

Do users of non-latin character languages suffer from spyware and trojans?

answered Apr 29, 2013 at 22:36

12 votes

How are spoofed packets detected?

answered Mar 5, 2013 at 16:37

11 votes

Mutual authentication for humans

answered Jan 29, 2013 at 0:46

11 votes

Accepted

What is the collision chance of a 128-bit hashing function if it is always fed with 256-bits of data?

answered May 6, 2013 at 1:31

11 votes

Why did Facebook not use HSTS for a long time after it became available?

answered Feb 22, 2014 at 5:21

11 votes

Accepted

How is DDoS possible if you're not listening to the DoS traffic?

answered Mar 6, 2015 at 21:33

11 votes

Should a web application return true http errors?

answered Nov 21, 2011 at 19:39

11 votes

Accepted

How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?

answered May 25, 2012 at 15:02

11 votes

What programming language does this code use?

answered Sep 19, 2011 at 14:16

11 votes

Securing an area both physically and technically

answered Sep 12, 2011 at 13:38

11 votes

Accepted

How can files be deleted in a HIPAA-compliant way?

answered Sep 12, 2011 at 14:16

11 votes

Authentication between multiple systems/platforms within the same web application context

answered Sep 12, 2011 at 15:24

11 votes

Why AES is not used for secure hashing, instead of SHA-x?

answered Oct 12, 2011 at 4:55

11 votes

Accepted

Is the OpenPGP private key inherently password-protected?

answered Jun 3, 2011 at 18:07

11 votes

PCI restrictions on using using (hashed) credit card number to identify a repeat customer?

answered Jun 24, 2011 at 3:06

11 votes

Accepted

logging requirements for PCI for web applications

answered Dec 23, 2010 at 20:40

11 votes

Accepted

xp_cmdshell: should it ever be used?

answered Mar 25, 2011 at 15:51

11 votes

homomorphic encryption and DARPA

answered May 19, 2011 at 23:11

10 votes

Accepted

IP Address spoofing?

answered May 3, 2011 at 17:38

10 votes

Does (J-)SOX Forbid the Use of Open Source Software?

answered Apr 5, 2011 at 12:52

3

4 5

…