Skip to main content
Jeff Ferland's user avatar
Jeff Ferland's user avatar
Jeff Ferland's user avatar
Jeff Ferland
Moderator
  • Member for 13 years, 7 months
  • Last seen more than a week ago
13 votes

Are WPA2 connections with a shared key secure?

13 votes

Should usernames be kept secret?

12 votes

Vuln research: reverse engineering, debugging or fuzzing?

12 votes

Does SSL/TLS (https) hide the urls being accessed

12 votes
Accepted

What can I do about TLS 1.0 javascript injection vulnerability on my server?

12 votes

How should hospitals handle the use of sharing credentials to access sensitive information, especially in critical situations?

12 votes
Accepted

Can you describe a real-life scenario of exploiting sticky bits?

12 votes

Why does OpenVPN require securely sharing certs with clients?

12 votes
Accepted

Is it ok to have self-signed certificates in source control?

12 votes

Why is leaving a passworded SSH over the internet so bad?

12 votes

How are spoofed packets detected?

12 votes

Do users of non-latin character languages suffer from spyware and trojans?

12 votes
Accepted

What is the collision chance of a 128-bit hashing function if it is always fed with 256-bits of data?

11 votes

Why did Facebook not use HSTS for a long time after it became available?

11 votes
Accepted

How is DDoS possible if you're not listening to the DoS traffic?

11 votes

Mutual authentication for humans

11 votes

Should a web application return true http errors?

11 votes
Accepted

How to mitigate SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability?

11 votes

What programming language does this code use?

11 votes

Securing an area both physically and technically

11 votes
Accepted

How can files be deleted in a HIPAA-compliant way?

11 votes

Authentication between multiple systems/platforms within the same web application context

11 votes

Why AES is not used for secure hashing, instead of SHA-x?

11 votes

PCI restrictions on using using (hashed) credit card number to identify a repeat customer?

11 votes
Accepted

Is the OpenPGP private key inherently password-protected?

11 votes
Accepted

logging requirements for PCI for web applications

11 votes
Accepted

xp_cmdshell: should it ever be used?

11 votes

homomorphic encryption and DARPA

10 votes
Accepted

IP Address spoofing?

10 votes

Does (J-)SOX Forbid the Use of Open Source Software?

1 2
3
4 5
15