/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 josh.blog
Strong Password Enforcement - Josh Betz
| | recyclebin.zip
AutoSpill the beans: not THAT big a deal :: Recyclebin.zip
2.4 parsecs away

Travel
| | The AutoSpill vulnerability has been discussed in social media and on online publications. Scaring people from using password managers is net-negative.
| | myers.io
Why You Shouldnt Hash on the Client - myers.io
2.2 parsecs away

Travel
| | Every so often I see posts on Stack Exchange, or Hacker News where someone has figured out that their passwords are being sent to the server and the server can see them! The logic that we see is that if the password is hashed client side, then only the hash needs to be sent to the server, so the server never knows the password. Unfortunately, I sometimes even see this go one step further when people suggest that with this arrangement, HTTPS isnt required. Wrong.
| | 8yd.no
Scramble ramble: Passwords, salt and hash | H.W. Sanden
2.9 parsecs away

Travel
| | Passwords should be set, not sent - and other things I thought about when someone talked about password-emailing as a natural part of the user registration. I'm no security expert, but that's a big n...
| | blog.cynosureprime.com
CynoSure Prime: Myspace hashes, length 10 and beyond
11.4 parsecs away

Travel
| Recovered Percent Total 360,213,049 Usable data 359,005,905 355,886,686 99.13% Unique 116,822,086 113,830,176 97% Salted hashes 68...