Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with authentication
Search options not deleted
user 1472
the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.
2
votes
Accepted
Security of login form
A nice way of handling the slow-down is to increase the delay between allowed authentication attempts by 1 second after every failed attempt. … There are plenty of pitfalls in authentication. Why not use a library like PHPass which neatly avoids many of these pitfalls for you? We've covered it here. …
- 5,265
28
votes
Accepted
Can IP address be a component of 2-factor authentication?
I would think of an IP address as being "somewhere you are" rather than any of the traditional "something you know", "something you have" and "something you are" that are part of 3-factor authentication …
- 5,265
1
vote
MySQL authentication, how to pad the 20-byte salt
The blog post at Portcullis security seems to be saying that you have to hash the 12-byte "salt" with SHA1 to turn it into a 20-byte string before prepending it to the hashed password.
- 5,265
2
votes
OpenID without SSL certificate
I just wanted to correct this misconception:
Just to make things clear, installing an SSL certificate is not possible because there is no dedicated IP address for web hosting.
While this may be …
- 5,265
8
votes
Accepted
Preventing Voter Fraud on a Social Media Contest
Rather than logging in to accounts they control, I expect voter fraud would be done by clickjacking or CSRF, harnessing the social viral power of Facebook to attract unwitting accomplices.
With the p …
- 5,265