Stack Exchange

Matthew

UK

Security consultant, specialising in web applications and password security

top accounts reputation activity subscriptions
Top Questions
Top Answers
149
What is the purpose of confirming old password to create a new password?
security.stackexchange.com

145
What is this kind of low-intensity, non-hacking attack on a web service?
security.stackexchange.com

121
Why would someone "double encrypt"?
security.stackexchange.com

120
What is the purpose of (ab)using the redirect page of my website for dubious URLs?
security.stackexchange.com

107
Is there any real value in hashing/salting passwords?
security.stackexchange.com

95
Would a digital signature have prevented the CCleaner compromise?
security.stackexchange.com

91
Two passwords for one account
security.stackexchange.com

90
How to tell users that they shouldn't disclose their password over the phone to our help desk?
security.stackexchange.com

72
What are the differences between credential stuffing and password spraying?
security.stackexchange.com

71
Should I allow browsers to remember my passwords and synchronize them?
security.stackexchange.com

67
Apple's open letter - they can't or won't backdoor iOS?
security.stackexchange.com

66
Is there such a thing as a "Black Box" that decrypts Internet traffic?
security.stackexchange.com

56
Safe to download router firmware over unencrypted HTTP?
security.stackexchange.com

56
Firebug appears to be decrypting SSL traffic: is it the correct behaviour?
security.stackexchange.com

54
Why does an encrypted message sometimes end in "=="
security.stackexchange.com

52
How can changing your DNS protect your online privacy?
security.stackexchange.com

50
Identifying the author(s) of a piece of malware
security.stackexchange.com

47
What pages are vulnerable to SQL injection?
security.stackexchange.com

47
What are the implications of a SHA-1 collision being found?
security.stackexchange.com

46
Normal usage vs. denial-of-service? How many requests are needed to talk about a denial of service?
security.stackexchange.com

44
Why is spreading malware.scr instead of malware.exe more common?
security.stackexchange.com

42
Is it practical to pre-blacklist certain GeoIP regions?
security.stackexchange.com

42
Is this a SQL injection attack or is it some sort of bug?
security.stackexchange.com

41
Does any technology prevent a CA unilaterally revoking a certificate?
security.stackexchange.com

40
Does replacing a bcrypt hash with an invalid hash result in no possible working password?
security.stackexchange.com

37
If I enter a password on the wrong site, should I consider it compromised?
security.stackexchange.com

36
How do I reset passwords on multiple websites easily?
security.stackexchange.com

36
Is it more secure to program a client-server system in a language other than English?
security.stackexchange.com

29
Explain to non tech savvy person how to check that your connection to mybank.com is safe?
security.stackexchange.com

28
What is the day to day life like as a father?
parenting.stackexchange.com

1 2 3 4 5