Collaborate Disseminate
I have the following question to which I know the answer is 2 years, but I cannot figure out why.
Any help is appreciated.
Consider the security of a password file, which includes a 10 bit salt and all passwords are hashed, but known to c… Continue reading Break salted passwords. How many seconds do we need? [closed]
Situation
I’m using KeePass to manage my password together with a long complicated password. I need to access passwords quite often so it’s a little cumbersome to have to enter the password each time. Since I’m working in a regular workpla… Continue reading Simplify usage of KeePass or equivalent password managers while preserving security
I hope this is the right discussion group.
Disclaimer: I’m, not a Windows/System admin but been a net-admin I have to deal with the Windows world
I’m trying to understand how to simplify my work in writing the NPS rules because MS NPS (Net… Continue reading Nested AD security groups [migrated]
In general, CSRF protection means this: "compare <input type=hidden> with a value in user’s session" (or sometimes – user cookie).
Now, suppose I want my app/website to be iframe compatible (while still protecting from CSRF… Continue reading iframe-friendly CSRF protection
These days we hear that a hacker has leaked confidential documents or information from a sports club or the National Security Agency. How do hackers find confidential information?
Continue reading How do hackers find confidential information? [closed]
When I try to find websites hosted on a specific IP using one of the online Reverse IP Lookup tools, I only get one website, but when I use Sub-domain enumeration, I find several websites on the same IP
Why does this happen? And how can I … Continue reading how can I find all the websites on a particular IP? [duplicate]
i have used SSO for many years and never experience this behavior.
Using URL https://example.html i have successfully passed authentication through Single SignOn page.
Clicked on logout link, which redirects me to custom.aspx page where a… Continue reading SSO logout / logon unusual behavior [closed]
The only protection features that mobile phones have to keep thieves that stole a target’s device from impersonating that subscriber is the PIN/PUK system that’s on by default on most SIM cards.
The gist of this is that only the legitimate… Continue reading How is SIM blocking enforced?
I’ve seen code like this:
if(password.length !== allowedPassword.length || !crypto.timingSafeEqual(password, allowedPassword))
So timingSafeEqual is supposed to use the same amount of time to compare 2 passwords, in order to prevent the … Continue reading Using timingSafeEqual
I have recently read an article about storing passwords safely and I have a few misunderstandings. I found out 4 ways of storing users’ passwords:
Just keep them in plain text
Keep passwords in plain text, but encrypt the database
Hash a … Continue reading Why are salted hashes better than just hashing?