Collaborate Disseminate
Or in other words, how much work and money does someone has to do/have to have many SIM cards with many numbers, each loaded in a mobile phone.
Continue reading How effective is mobile phone verification in stopping fake user registration?
Im trying to create a secure portal for parents to view their sons or daughters information.
I would need to have a register page. Im having trouble with hashing and salting the password.
Then I need help with decoding the … Continue reading Secure Register – Login Portal
I was asked to design and implement a solution that I have some security concerns about.
The customer has a web application into which users log in using their credentials.
The customer wants to add a button in that applic… Continue reading ‘Fake SSO & self registration’ access to a web api
It’s been about 6 months since Def Con 26. Yes, only 6 months. But here we are, it’s 2019, and we are ready for a new round of Def Con prep! The SEVillage is entering its 10th (10th!!) year at Def Con and, we are prepared to make this more … Continue reading Launch of the SEVillage at Def Con 27 Signups
This might have been asked before, but I’ve looked for a few hours and can’t find much.
I would also like some opinions on what an attacker might do if he enters an email address on a site and it responds with “That user ID … Continue reading What might an attacker do with email address as login name?
Suppose my site needs to register for a member account with email, and the email needs to be verified and activated. I forbid users to register with same email twice. When it does, should I remind the user to activate the ema… Continue reading When a user tries to register with an unactivated email again, should I tell user that the emails has not been activated?
I’m developing a mobile app for iOS and Android that has, due to specs that are given by management, some security flaws. However, I can’t quite explain in concrete business speak why the specs are not secure, and thus I can’… Continue reading How is this registration setup vulnerable?
I’m struggling to write a secure sign-up form for my website. (My site is some kind of an image gallery. I have knowledge in html, javascript, msql and php)
I know there is a tactic to secure login forms via checking and storing the fail… Continue reading How can I protect the signup form in my website? Is special spam prevention needed?
This may sound like an open ended question, but I would like to take my chances and understand if there is any way the rest of the community is handling this issue.
Let’s say there is an app that allows users to sign up usin… Continue reading Prevent against OTP abuse in app sign up flow
This question already has an answer here:
Why is client-side hashing of a password so uncommon?
10 answers
Please read be… Continue reading Should I hash the password client side during SCRAM-SHA256 registration? [duplicate]