|
You are here |
blog.cynosureprime.com | ||
| | | | |
defuse.ca
|
|
| | | | | [AI summary] An individual attempts to crack 6 million unsalted LinkedIn user passwords using a large dictionary attack tool to demonstrate the critical importance of salting in password security. | |
| | | | |
dusted.codes
|
|
| | | | | SHA-256 is not a secure password hashing algorithm | |
| | | | |
pboyd.io
|
|
| | | | | Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... | |
| | | | |
risley.net
|
|
| | | [AI summary] The author provides a critical analysis of password manager security, specifically comparing the bloated, enterprise-focused 1Password with the privacy-centric, open-source Standard Notes, while offering technical advice on encryption, biometric risks, and trusted platform modules. | ||