Collaborate Disseminate
Ok so, we’ve got a situation here that sounds a bit hopeless, but it’s happening right now and we could really use some help. Please bear with me here as I try to explain…
Recently, my wife and I were on a vacation abroad,… Continue reading Recovering locked-out accounts after losing smartphone
I run a SaaS used by teams to collect company-related information (think something like Crashlytics). Even if the tool lets users invite their colleagues, we often find cases of individuals who created an account for their co… Continue reading Policy for regaining access to a colleague’s account
The posts
Restrict Remote Desktop access to specific users to specific
servers in a domain environment?
Restrict RDP Access by IP Address
explain well how to restrict access to a computer depending who is trying… Continue reading firewall settings for RDC – allow account depending on computer of requester [on hold]
I have almost finished developing my login system and there is one more thing that I’m not sure about. So many debates I found on the internet about counting invalid logins and locking users account. My system stores user nam… Continue reading Should user account be locked after X amount of failed logins?
Backstory
My sites and VPS were stolen from me. The hosting company and I were locked out and unable to access it. They weren’t able to create a temp password for access because the attacker blocked it.
The last time I was lo… Continue reading Brutalized VPS recovery data now available. Considerations? [closed]
I’m creating an online service for companies to manage registration for annual events. Event attendees will need some way to login to the system to manage their booking, payment, special requests, etc. I expect attendees to… Continue reading Login workflow for an occasionally used service
I am following CIS hardening best practices and it states that the log out time for shell is 60 seconds. This seems pretty steep for non production environments, is there any other best practise around the idle log out time?
… Continue reading Shell idle log out time best practice?
My ISP recently changed the range of IPs they assign to customers which triggered gmails “hacker alarm” or something and prevents me from logging in.
The recovery options they provide (recovery mail or phone via text) don’t w… Continue reading How to prevent getting locked out of gmail with a dynamic IP?
Let us say I am creating a program that works offline so password information needs to be stored locally (I know, not optimal, but this is just a personal project of mine). In terms of keeping the password itself secure, I fi… Continue reading Securing information on password attempts
Edit: As I am asked to clarify this question I will state it in one sentence: What is a good lockout policy for web applications, why, on what does it depend?
It is hard to find a best practice regarding account lockout poli… Continue reading Account lockout policy guidelines [on hold]