/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.andlabs.org
Attack and Defense Labs: Chrome and Safari users open to stealth HTML5 AppCache attack
| | feross.org
Using the HTML5 Fullscreen API for Phishing Attacks ยป Feross.org
2.7 parsecs away

Travel
| | Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
| | textslashplain.com
Attack Techniques: Phishing via Local Files - text/plain
3.6 parsecs away

Travel
| | One attack technique I've seen in use recently involves enticing the victim to enter their password into a locally-downloaded HTML file. The attack begins by the victim receiving an email lure with a HTML file attachment (for me, often with the .shtml file extension): When the user opens the file, a HTML-based credential prompt is...
| | educatedguesswork.org
A look at password security, Part II: Web sites
2.8 parsecs away

Travel
| | [AI summary] This article discusses password security challenges on websites, focusing on vulnerabilities like remote attacks, password reuse, phishing, and the importance of secure password storage and authentication methods.
| | www.sjoerdlangkemper.nl
Requirements for iterative password hashing
17.2 parsecs away

Travel
| To securely store passwords they should be hashed with a slow hashing function, such as PBKDF2. PBKDF2 is slow because it calls a fast hash function many times. This blog post explores some properties that the iterations must have to be secure.