Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.
2
votes
Does Password Harvesting Happen in Servers?
Harvesting the right password is therefore much more efficient than harvesting the wrong passwords. … You still need to try those passwords and having a lot of wrong passwords will make this step unnecessary time consuming.
So, though possible, it is unlikely to happen because it is so inefficient. …
4
votes
Why should password reset link be single use?
The threat that is being mitigated by the single use is that someone else uses (or re-uses) the url to reset the password.
If the url does not work, apparently someone has intercepted the mail and yo …
0
votes
Sending password in separate email
Eh, yes and no. If you can access a specific e-mail from a user at a specific time, there is no guarantee that you can always access all mails from that user. Access may be temporary (for example if a …
2
votes
Why can't we protect the password file so that only the system can read it?
You could use a TPM chip-like solution for this that allows only set password and verify password (and perhaps delete password)
You can also externalize the passwords from the system, using for example … Granted, your passwords on the LDAP system are readable by the root user on that system, but on all other systems that use the radius server, you can't read the password file. …