Category Archives: passwords

Failures in Twitter’s Two-Factor Authentication System

Posted on by

Twitter is having intermittent problems with its two-factor authentication system:

Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or physical authentication token to secure their Twitter account may not have reason to test the mechanism. But users have been self-reporting issues on Twitter since the weekend, and WIRED confirmed that on at least some accounts, authentication texts are hours delayed or not coming at all. The meltdown comes less than two weeks after Twitter laid off about half of its workers…

Continue reading Failures in Twitter’s Two-Factor Authentication System→

Is there a way to store a verification-hash of a secret on a ‘consumer HSM’ like Yubikey or another WebAuthn device?

Posted on by

Context: I’m trying to design an SRS solution for your personal secrets – "Anki for passwords." (This is mostly a learning-exercise, to help me develop my intuition for writing secure(-ish?) code, and to explore the problem-spac… Continue reading Is there a way to store a verification-hash of a secret on a ‘consumer HSM’ like Yubikey or another WebAuthn device?→

False sense of safety undermines good password hygiene

Posted on by

LastPass released findings from its fifth annual Psychology of Password report, which revealed even with cybersecurity education on the rise, password hygiene has not improved. Regardless of generational differences across Boomers, Millennials and Gen … Continue reading False sense of safety undermines good password hygiene→

Businesses want technologies that allow for passwordless workflows

Posted on by

Bitwarden announced the results of its 2023 Password Decisions Survey, which polled 800 IT decision makers across a wide range of industries, showing that passwordless technology is here to stay, with businesses enthusiastic about its perceived securit… Continue reading Businesses want technologies that allow for passwordless workflows→

Everytime we restart the Linux serever it looks like the root gets a new password hash [migrated]

Posted on by

The other day I was asked by a friend to change their forgotten root password of their Linux server.
I have done this procedure many times without a problem, but this time something strange happened and I need an explanation for it.
What I… Continue reading Everytime we restart the Linux serever it looks like the root gets a new password hash [migrated]→

How do I remember passwords for environments where Password Manager is not available?

Posted on by

I am a big fan of 1Password. And I try to save my passwords in 1Password as much as possible.
However, there are environments where 1Password cannot be used. That is the password to protect 1Password itself and the password for full disk e… Continue reading How do I remember passwords for environments where Password Manager is not available?→