Explore >> Select a destination

You are here

 sriku.org
Forget password | Codaholic
| | educatedguesswork.org
A look at password security, Part III: More secure login mechanisms
9.2 parsecs away

Travel
| |
| | palant.info
Should your next web-based login form avoid sending passwords in clear text? | Almost Secure
11.0 parsecs away

Travel
| | Allowing password-based authentication without letting the server know the password is fascinating. Unfortunately, for web applications this doesn't solve any problems.
| | blog.plataformatec.com.br
Improve remember me cookie expiration in Devise (CVE-2015-8314) « Plataformatec Blog
12.1 parsecs away

Travel
| | A security bug (CVE-2015-8314) has been reported in Devise's remember me system. Devise implements the "Remember me" functionality by using cookies. While this functionality works across multiple devices, Devise ended-up generating the same cookie for all devices. Consequently, if a malicious user was able to steal a remember me cookie, the cookie could be used
| | idiallo.com
Fixing a 3 year old hack
81.5 parsecs away

Travel
| Downloading things from an official source can cost you lots of time and money in the long run