23965 shaares
151 results
tagged
passwords
This is on you, makers of sites and services that allow users to create passwords like “password.” You can do better!
Kanye, please keep your “all zeroes! all the time!” password away from the media. And Nutella? No, “Nutella” is NOT a good password.
Technique to persist an attack.
A recovered 98MB file underscores the risks of trusting personal info to strangers.
Researchers concluded that passphrase requirements such as a 15-character minimum length deter the majority users from reusing them on other sites.
Your eight-character password is not as secure as you might think, but there are several simple actions you can take to truly strengthen your password security.
Sally Vandeven// TL;DR – Passwords stored using reversible encryption, even if they are VERY LONG, can be trivially reversed by an attacker. Password cracking is quite enjoyable. It is very satisfying to launch Hashcat, throw a bunch of hashes at it and watch the progress over minutes, which turns into hours and then days. It does […]
Nice timeline.
HORRIBLE password policy. Feed it right into hashcat!
Credential stuffing is rampant – so try not to reuse the same password on every site, eh?
Welcome back, my neophyte hackers! I have already done a few tutorials on password cracking, including ones for Linux and Windows, WEP and WPA2, and even online passwords using THC Hydra. Now, I th...
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, pas...
Back in August, I pushed out a service as part of Have I Been Pwned (HIBP) to help organisations block bad passwords from their online things. I called it "Pwned Passwords" and released 320M of them from real-world data breaches via both a downloadable file and an online
The mythical creature's popularity says a lot about the psychology of password creation.
Bit technical, but interesting. On "secret salts."
Yesterday I had a bunch of people point me at a tweet from a politician in the UK named Nadine Dorries. As it turns out, some folks were rather alarmed about her position on sharing what we would normally consider to be a secret. In this case, that secret is
While defending Damian Green, the Tory MP admitted she allows all levels of staff to log on to her computer
Photo-sharing site Imgur just found out it was breached back in 2014 – and back then it wasn’t storing your passwords securely.