Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 200793

Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.

2 votes

Does Password Harvesting Happen in Servers?

Harvesting the right password is therefore much more efficient than harvesting the wrong passwords. … You still need to try those passwords and having a lot of wrong passwords will make this step unnecessary time consuming. So, though possible, it is unlikely to happen because it is so inefficient. …
Ljm Dullaart's user avatar
  • 2,180
4 votes

Why should password reset link be single use?

The threat that is being mitigated by the single use is that someone else uses (or re-uses) the url to reset the password. If the url does not work, apparently someone has intercepted the mail and yo …
Ljm Dullaart's user avatar
  • 2,180
0 votes

Sending password in separate email

Eh, yes and no. If you can access a specific e-mail from a user at a specific time, there is no guarantee that you can always access all mails from that user. Access may be temporary (for example if a …
Ljm Dullaart's user avatar
  • 2,180
2 votes

Why can't we protect the password file so that only the system can read it?

You could use a TPM chip-like solution for this that allows only set password and verify password (and perhaps delete password) You can also externalize the passwords from the system, using for example … Granted, your passwords on the LDAP system are readable by the root user on that system, but on all other systems that use the radius server, you can't read the password file. …
Ljm Dullaart's user avatar
  • 2,180