Collaborate Disseminate
I log repeated invalid login attempts on a small custom made e-shop (no open source system is used). Last year, I started recording repeated failed logins from a single IP address. That’s why I started logging the passwords that this IP ad… Continue reading Why does a password guessing robot repeatedly test nonsense?
Which password is harder to guess/brute-force:
onlysmallletters!
Ez65);k
And also, can you explain your answer?
microsoft authenticator requires an:
outlook account
Verification account
Icloud account
The first two are required to setup the authenticator on a new device, the latter stores all the data to be restored.
Ideally, your "verificati… Continue reading Is it necessary to have keep these 4 accounts separate from password manager?
Microsoft Authenticator requires an:
Outlook account
Verification account
iCloud account
The first two are required to set up the authenticator on a new device, the latter stores all the data to be restored.
Ideally, your "verificat… Continue reading Is it necessary to have keep these 4 accounts separate from password manager?
Darren Siegel is a cyber security expert at Specops Software. He works as a lead IT engineer, helping organizations solve complex challenges within IT security. In this interview with Help Net Security he discusses the challenges related to password se… Continue reading Strong security starts with the strengthening of the weakest link: passwords
I’m interested if there are any current vulnerabilities for the CyberRoam routers to get access to the config page or maybe a reverse shell to the system. It’s setup as a firewall to filter content through and I have internal access passwo… Continue reading CyberRoam Reverse Shell or Admin Access
In this interview with Help Net Security, Oded Hareven, CEO at Akeyless, explains how organizations manage secrets, particularly how this practice has changed and evolved amid the rapid shift to hybrid/remote work and how it benefits organizations secu… Continue reading The importance of securing machine-to-machine and human-to-machine interaction
I have been thinking of implementing a new practice where local admin privileges are disabled entirely from all endpoints. For users who need to elevate privileges, they will have a separate admin account dedicated and restricted only to t… Continue reading Is there really any benefit in having a separate local admin account
I’m curious to check what could be some possibly secure and recommended ways through which I could send a password as part of a GET request in rails? Just to be explicit, we’re using HTTPS in general.
High level overview of the use case: O… Continue reading How to send a password securely as part of a GET request in rails?
I am looking to create a brand new authentication service that follows the OpenId connect protocol. I would like to use a username/password combination for the authentication and the authorization grant, I’m curious what the downsides are … Continue reading Using a spa login page for authentication in a openId connect servic