Troy Hunt

JULY 18, 2022

I made next to no money out of them and I got rid of them altogether in 2016 in favour of the sponsorship line of text you still see at the top of the page today. Password Purgatory ? And now you're thinking "I bet he wrote this just to get donations" so instead, go and give Let's Encrypt a donation.

Data breaches 251

Data breaches Passwords Password Management Software 251

Security Affairs

FEBRUARY 25, 2021

Attackers employed a custom tunneling tool to achieve this, it forwards client traffic to the server, the malware encrypts the traffic using trivial binary encryption. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack.

Malware 93

Malware Cryptocurrency Password Management Encryption 93

Anton on Security

JUNE 10, 2022

A password manager claimed “zero trust for passwords” while a SIEM/UEBA vendor promised to reveal all zero trust secrets (I bet they use VPN internally…). A firewall management vendor claimed to “simplify zero trust.” RSA 2016: Musings and Contemplations RSA 2015: Rise of Chaos!! RSA 2017: What’s The Theme?

VPN 189

VPN Marketing Firewall Passwords 189

eSecurity Planet

MARCH 25, 2022

Remote desktop software’s sensitive influence over other devices means identity and access management (IAM), password security , and multi-factor authentication are critical for risk management. Reconnaissance. SamSam Ransomware: Malware Specializing in RDP. clinical labs company September U.S. Check Point.

VPN 117

VPN Software Authentication Encryption 117

Troy Hunt

JUNE 25, 2018

In particular, Mozilla was instrumental in the birth of Let's Encrypt , the free and open certificate authority that's massively increased the adoption of HTTPS on the web. My relationship with 1Password stretches all the way back to 2011 when I came to the realisation that the only secure password is the one you can't remember.

Passwords 273

Passwords Data breaches Password Management Accountability 273

eSecurity Planet

DECEMBER 3, 2021

Normally account take overs are due to insecure passwords or recovery options, this is definitely something different. If the US government dictating iPhone encryption design sounds ok to you, ask yourself how you'll feel when China demands the same. — Matthew Green (@matthew_d_green) February 17, 2016.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

Security Boulevard

JUNE 10, 2022

A password manager claimed “zero trust for passwords” while a SIEM/UEBA vendor promised to reveal all zero trust secrets (I bet they use VPN internally…). A firewall management vendor claimed to “simplify zero trust.” RSA 2016: Musings and Contemplations. Anyhow, a decent question for RSA 2025….

VPN 116

VPN Marketing Firewall Passwords 116

Troy Hunt

JANUARY 10, 2018

We are rapidly approaching a "secure by default" web and the green padlock is becoming the norm ( about two thirds of all browser traffic is now encrypted ). A great resource for getting a quick snapshot of how a site implements their SSL / TLS / HTTPS ("encryption of traffic", for the masses) is SSL Labs.

Hacking 279

Hacking Government Risk Encryption 279

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys.

Software 52

Software Passwords Internet Internet 52

CyberSecurity Insiders

SEPTEMBER 8, 2021

I was obsessed with encryption. I was fascinated by the fact that nothing in the world could reverse an operation of encryption without the needed key to decrypt the item. I also discovered several security vulnerabilities in LastPass Password Manager. I learned everything I could about encryption and how it worked.

Computers and Electronics 52

Computers and Electronics Architecture Education Cybersecurity 52