Stack Exchange

Xander

Charlotte, NC

http://xanderland.com

I'm a software consultant specializing in application security, architecture, and development.

top accounts reputation activity favorites subscriptions
Top Questions
Top Answers
223
Why can't the FBI read the key embedded in the iPhone's secure chip/ROM directly from hardware (silicon)?
security.stackexchange.com

90
This company is telling me that I need a firewall. Do I?
security.stackexchange.com

90
Is there a field length that is too short to allow harmful SQL injection?
security.stackexchange.com

86
Do bad passwords produce bad salted hashes?
security.stackexchange.com

67
How should high net worth individuals secure their financial accounts?
security.stackexchange.com

66
Windows language pack update with a gibberish name
security.stackexchange.com

65
Why would I choose SHA-256 over SHA-512 for a SSL/TLS certificate?
security.stackexchange.com

58
What is different about being targeted by a professional attacker?
security.stackexchange.com

53
Are passwords that are manually typed in really unrecoverable from memory or disk?
security.stackexchange.com

48
Attacker circumventing 2FA. How to defend?
security.stackexchange.com

45
Is showing your IP address in the URL a bad practice?
security.stackexchange.com

44
Is email less secure than voicemail, snail mail, or internet portals for transferring sensitive information?
security.stackexchange.com

43
Is XSS a server-side or client-side vulnerability?
security.stackexchange.com

43
Methods for slowing down a hashing algorithm
security.stackexchange.com

43
Can an HTTPS site be malicious or unsafe?
security.stackexchange.com

43
Is it dangerous to publicly share ciphertext?
security.stackexchange.com

42
How useful are CVE entries?
security.stackexchange.com

40
Does holding an AES-encrypted string and its cleartext from a database help an attacker in decrypting other parts of the database
security.stackexchange.com

40
Why don't popular web services mask the CVV?
security.stackexchange.com

39
When encrypting cloud-stored data, is it acceptable to use the user's account password?
security.stackexchange.com

39
Are GUIDs safe for one-time tokens?
security.stackexchange.com

38
Do I have to hash users' IP addresses when I log them?
security.stackexchange.com

37
What are the disadvantages of implementing HTTP authentication in a web application?
security.stackexchange.com

37
Where can I find open APIs about beer?
alcohol.stackexchange.com

35
Do Chrome and Firefox send random values rather than the actual timestamp in ClientHello of TLS?
security.stackexchange.com

34
Effect on PCI compliance of not checking SSL certificate?
security.stackexchange.com

34
How does a clean desk policy provide security benefits?
security.stackexchange.com

33
How is hashing safe if a given string always generates the same hash?
security.stackexchange.com

32
Ransomware encryption keys
security.stackexchange.com

32
Is it possible to inject values in a drop down list?
security.stackexchange.com

1 2 3 4 5 … 7