All Questions
11 questions
0
votes
3
answers
2k
views
is it a standard best practice to *display* the last-logged-in user by default on an individual employee laptop?
My new workplace laptop is configured so that after I log off and log on, rather than the last-logged-in user being selected by default, I have to hit ctrl-alt-del and then enter my username and ...
- 653
1
vote
1
answer
171
views
PTH & Salted Passwords
I see a lot of documentation out there blaming PtH on Windows operating systems to the unsalted nature of LM/NT hashes.
Isn't this conjecture wrong? Introducing salting (if the salt is deterministic /...
- 11
15
votes
4
answers
88k
views
Bypassing Windows 10 password with Utilman.exe trick - fixed?
Recently I run into a locked down laptop with Windows 10 OS (actually I guess it was updated from Windows 7 if that matters). My collegue was using this computer some time ago and lost his login and ...
- 383
1
vote
1
answer
299
views
Why Microsoft leaves known security flaws?
There is very well known security flaw in microsoft windows. That you simle boot a linux OS from flash drive e.g Kali Linux. And just replace a cmd file with sethc file and you can prompt cmd with ...
- 165
2
votes
2
answers
2k
views
User Account Guessing [duplicate]
I'm doing some research on user account guessing, and wanted to ask a question about some "bad practices".
My thought is generally this is a trade-off between great user functionality/UX and security....
2
votes
2
answers
262
views
Save application autostart login token on computer
I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
- 21
2
votes
3
answers
939
views
How safe is it to provide my administrator account password for a 3rd party software: EasyUS Todo Backup?
I've been recently searching for a backup solution for my Windows desktop. That's when I came across this free software called EasyUS Todo Backup. (I know it's a mouthful but English doesn't seem to ...
- 171
22
votes
4
answers
10k
views
How secure is Windows 8's Picture Password login?
The final Windows 8 build has been released to manufacturing. One of the new features of Windows 8 is "Picture Password", where the end user logs on to Windows by clicking a specific pattern on the ...
user2122
66
votes
1
answer
8k
views
What's the risk if I accidently type my password into a username field (Windows logon)?
I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
- 3,282
2
votes
1
answer
1k
views
Token Based Authentication & Pass-the-hash Attacks
Do token-based authentication solutions (such as RSA SecurID) mitigate tools like incognito and/or pass-the-hash tools?
- 23
8
votes
4
answers
14k
views
How secure is Windows Auto-Logon?
Obviously, if auto-logon is enabled, anyone who can gain physical access to the PC can use the PC. That's not the question.
The question is, when I enable auto-logon for my Windows 7 box, will there ...
- 1,227