Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 121141

Security controls and features related to an end user's account with a web/mobile based application or an operating system.

57 votes
Accepted

Can a malicious actor lock the real user out by deliberately trying incorrect passwords ever...

Login brute-force protection can be enforced in three ways: Temporary Lockout Permanent Lockout CAPTCHA In my perspective, CAPTCHA is the most reasonable solution to avoid the risk of bruteforce …
hax's user avatar
  • 3,951
3 votes

Does a hardware generated pin plus SMS verification count as two factor authentication?

Strictly speaking 2FA only means two factors are used to authenticate a user. What we usually see is a password based authentication coupled with an SMS or app (e.g. RSA Secure ID or Google Authenti …
hax's user avatar
  • 3,951
3 votes

What should I do with the hidden/disabled Administrator account?

Considering teh concept of defense in depth, a password has to be set for all critical account irrespective of their status. So it is recommended to enable Admin to set up a strong password. net use …
hax's user avatar
  • 3,951