Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with authentication
Search options not deleted
user 10439
the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.
6
votes
Security Implications of Google's Two Step Authentication’s Backup Codes
You are right in that this method of authentication is less secure, Im sure they faced a scenario where this was necessary but I would say unless you yourself are faced with that specific situation going … with 2-step authentication methods is in general safer. …
- 3,550
1
vote
Issuing secure tokens that doesn't require any server side state
Another option is to force a renew of the token every so often, possibly transparent from the user (not requiring manual authentication) but just refreshing the token. …
- 3,550
4
votes
Should I implement incorrect password delay in a website or a webservice?
A traditional delay would mitigate web browser based attacks, for example if someone uses phantomjs to automate login attempts the normal delay (in your case "more than one second") would be enough to …
- 3,550
20
votes
Accepted
Are reCAPTCHA enough to prevent brute-force password guesses?
ReCaptcha is great from a client side point of view, but it's not perfect.
The mail technique that you mention is called account lockdown, and is a very effective deterrent against brute force attac …
- 3,550
1
vote
Software updates APIs authentication
current set up, among the important parts it states:
"...one of the key reasons for OAuth2 to exist is so that Client
applications do not need to collect user credentials (as they did with
Basic authentication …
- 3,550