hashes

Good Essay on the History of Bad Password Policies

| | hashes, history of security, passwords, Uncategorized
Stuart Schechter makes some good points on the history of bad password policies: Morris and Thompson’s work brought much-needed data to highlight a problem that lots of people suspected was bad, but ...
Schneier on Security
1989 Tiananmen Square “Tank Man” image, with the text “inappropriate speech” superimposed

China Cracks Apple Private Protocol — AirDrop Pwned

| | Airdrop, Apple, Beijing Wangshendongjian, china, Chinese, Chinese Communists, Chinese drive-by attack, chinese government, Great Firewall of China, hash, hash algorithms, hash function, hash functions, hash generation, hashes, Peoples Republic of China, rainbow table, SB Blogwatch
AirDrop hashing is weaksauce: Chinese citizens using peer-to-peer wireless comms “must be identified.” ...
Security Boulevard
NetworkMiner + Cerberos

Extracting Kerberos Credentials from PCAP

| | crack, credentials, hashcat, hashes, John, JtR, Kali, KERBEROS, krb5asrep, krb5pa, krb5tgs, Linux, NetworkMinerCLI, passwords, pcap
NetworkMiner is one of the best tools around for extracting credentials, such as usernames and passwords, from PCAP files. The credential extraction feature is primarily designed for defenders, in order to analyze ...
NETRESEC Network Security Blog
pyramid of pain

Hash Hunting: Why File Hashes are Still Important

| | Featured Articles, Files, hashes, IT Security and Data Protection, security, Threat Intelligence
According to Gartner, threat intelligence is evidence-based knowledge, including context, mechanisms, indicators, implications and actionable intelligence. When security research teams or government agencies release threat intelligence reports, some of the more tactical ...
The State of Security