/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 defuse.ca
Cracking LinkedIn's Hashes with Crackstation
| | pboyd.io
How Not to Store Passwords - pboyd.io
2.5 parsecs away

Travel
| | Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean....
| | www.splitbrain.org
Working with Password Hashes in PHP [splitbrain.org]
2.5 parsecs away

Travel
| | [AI summary] The post explains how to manage password hashing in PHP using DokuWiki's auth_cryptPassword() and auth_verifyPassword() functions to support multiple algorithms like MD5, SHA1, and crypt while ensuring backward compatibility.
| | crackstation.net
CrackStation's Password Cracking Dictionary (Pay what you want!)
1.7 parsecs away

Travel
| | Download CrackStation's password cracking wordlist.
| | educatedguesswork.org
A look at password security, Part III: More secure login mechanisms
14.2 parsecs away

Travel
| [AI summary] This article discusses advanced password security mechanisms, focusing on technologies like two-factor authentication, password authenticated key agreement, and public key authentication to enhance web login security beyond traditional passwords.