Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 2742

Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.

4
votes
0answers
Possible Duplicate: What to do about websites that store plain text passwords When using a system as it was designed to be used, and the system provides proof that it is storing and/or … transmitting passwords in plain-text... What are best practices in dealing with that system, and the owners of that system, while minimizing risk to yourself via the use of the system, or reporting of the related issues? …
asked Feb 2 '12 by blunders
2
votes
2answers
Wondering if there's any research behind the most common password reset cycle I've seen of 90-days, and if there's any research that gives any insight into how to optimize password resets to reduce pa …
asked May 15 '14 by blunders
16
votes
6answers
If the input for the security question is completely digital, should the answer to a security question be hashed (or at least encrypted) on the authentication server?
asked Aug 9 '12 by blunders
8
votes
5answers
Beyond commonsense and physical access controls, is the system password the oldest still in active use security feature? By physical access, I mean for example leaving the system within a secure space …
asked Jun 6 '11 by blunders
0
votes
Just ask the admin. Really, my experience is that they'll tell you if they're storing the password in plain text. To answer your question directly, no based on the information you've provided it's n …
answered Apr 2 '15 by blunders
1
vote
3answers
Have a few thoughts on the topic, but the general gist is if a user inputs a new password, is it possible to have a high confidence that a password is not being reused elsewhere? By elsewhere, I mean …
asked May 14 '14 by blunders
2
votes
3answers
Clearly it works best if the request to update a password happens as a response to an inbound request to access a known system, but how do you make an outbound request to users to update their passwords? …
asked Aug 21 '12 by blunders
14
votes
2answers
Looking for research on the count and complexity of passwords that an average user is actively using. Note: Also, just to be clear, by research, this is not a request for you to respond with an …
asked May 15 '14 by blunders