Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.
user avatar
user avatar
user avatar
Castaglia
  • Member for 6 years, 4 months
  • Last seen more than a month ago
1261 votes
22 answers
274k views

XKCD #936: Short complex password, or long dictionary passphrase?

  • 2,688
918 votes
11 answers
299k views

How to securely hash passwords?

  • 71.8k
859 votes
14 answers
166k views

What technical reasons are there to have low maximum password lengths?

  • 7,901
615 votes
23 answers
149k views

How does changing your password every 90 days increase security?

592 votes
7 answers
202k views

How to store salt?

  • 6,107
497 votes
8 answers
494k views

RSA vs. DSA for SSH authentication keys

  • 13k
249 votes
10 answers
83k views

How is the "WannaCry" Malware spreading and how should users defend themselves from it?

  • 60.7k
245 votes
16 answers
393k views

Provide subjectAltName to openssl directly on the command line

223 votes
13 answers
27k views

Is there any reason to not show users incorrectly entered passwords after a successful login?

  • 2,043
220 votes
4 answers
90k views

Recommended # of iterations when using PBKDF2-SHA256?

  • 2,388
186 votes
9 answers
25k views

Is the NHS wrong about passwords?

172 votes
26 answers
22k views

Convince people not to share their password with trusted others

  • 1,518
158 votes
7 answers
251k views

Why most people use 256 bit encryption instead of 128 bit?

  • 2,877
157 votes
17 answers
22k views

Is the BBC’s advice on choosing a password sensible?

  • 7,629
152 votes
11 answers
86k views

https security - should password be hashed server-side or client-side?

  • 1,755
137 votes
8 answers
67k views

How hard is it to intercept SMS (two-factor authentication)?

133 votes
6 answers
47k views

How secure are the FIDO U2F tokens

  • 81.9k
132 votes
10 answers
16k views

Should I contact the manufacturer if their product allows access to other users' location information?

  • 1,153
127 votes
7 answers
105k views

Let's Encrypt for intranet websites?

125 votes
7 answers
44k views

My ISP uses deep packet inspection; what can they observe?

123 votes
3 answers
173k views

Session Authentication vs Token Authentication

  • 2,705
122 votes
7 answers
64k views

Is using Git for deploying a bad practice?

  • 1,323
107 votes
5 answers
31k views

How can waiting 24 hours to change the password again be secure?

  • 928
105 votes
14 answers
14k views

Could keystroke timing improve security on a password?

  • 1,132
105 votes
11 answers
204k views

How dangerous is it to reveal your date of birth, and why?

  • 2,474
102 votes
5 answers
84k views

How to check if an SSH private key has passphrase or not?

  • 1,219
99 votes
7 answers
17k views

Attacker circumventing 2FA. How to defend?

  • 7,629
97 votes
7 answers
21k views

Does FTPS (FTP+S) offer better security than SFTP on the server side?

96 votes
6 answers
6k views

Should passwords be automatically reset when the underlying method changes

  • 1,517
94 votes
5 answers
84k views

What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?

  • 2,066
1
2 3 4 5
8