Collaborate Disseminate
How Bitcoin restricts the mining time?
We know cryptocurrency systems restrict the mining time of a block to a certain limit for security reasons. For example, mining time for Bitcoin is ~10 minutes. Some other cryptocurrency system have d… Continue reading How Bitcoin restricts the mining time? [migrated]
I have a ISP CPE box running software by SoftAtHome (similar to Orange LiveBox or Swisscom devices).
By querying the undocumented sysbus-API on the box using this tool, I have discovered several hidden user accounts with hardcoded password… Continue reading Cracking SSHA256 hash+salt of unknown composition from undocumented router API
I have been struggling with John for the past week, I have seen a lot of people asking similar questions on different platforms but I could not find any solution for what I am facing.
I am struggling with 2 main issues:
John stops immedia… Continue reading John stops immediately when wordlist is used and hash not loaded properly [closed]
If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate?
Continue reading FedRamp Moderate question about hashing MD5
In summary: the idea behind password cracking is just to replicate the password validation procedure of a web server locally with lots and lots of attempts and check whether the output of that verification matches any known leaked hash.
Ho… Continue reading Avoiding password cracking by using custom hashing procedure?
I’ve just started new project and decide to try something new, so I’am not using anymore EnityFramework and Identity framework. I Decide to try MongoDB, so i wanted to design from scratch storing Users in database.
In database I’am going t… Continue reading How good/bad is this implementation to secure password?
What I am asking is does big tech companies like google have new users to hash their passwords on their browsers before it is sent to the back end?
Do users send their password in plain text then the google servers hash it on their databas… Continue reading Do large companies like Google have users hash their passwords client-side? [duplicate]
What I am asking is does big tech companies like google have new users to hash their passwords on their browsers before it is sent to the back end?
Do users send their password in plain text then the google servers hash it on their databas… Continue reading Do large companies like Google have users hash their passwords client-side? [duplicate]
Suppose I have a password, say "thisIsThePassword".
Then I have MD5 hashes of that password followed by an increasing numeric suffix:
MD5("thisIsThePassword1") = c5c038617ea97315f137606c4123789e
MD5("thisIsThePassw… Continue reading Randomness of hash of (password + suffix)
I need to implement some hashing scheme for an open-source project. This is what I currently have and I’d like to hear whether this is secure enough –
The password is hashed using PBKDF2-SHA256 (which I prefer over bcrypt simply because Op… Continue reading Is combining salt from two places secure enough and what length