troyhunt

10 ms·

61.
by troyhunt 14y ago
The emphasis should have been on "common" - there were only 302 emails out of the full sample which appeared in both breaches. I would have like a larger sample size, but that's all there was.
62.
by troyhunt 14y ago
The comic is amusing, but it only works if you can apply it uniquely across accounts. Once you start creating unique passwords of that length you can't remember them. Get a password manager and forget about patterns - the XKCD approach does
63.
What do Sony and Yahoo have in common? Passwords(troyhunt.com)
28 points by troyhunt 14y ago|22 comments
64.
Our password hashing has no clothes(troyhunt.com)
3 points by troyhunt 14y ago|0 comments
65.
16 TIPS FOR RUNNING A SUCCESFULL PHISHING SCAM(troyhunt.com)
1 points by troyhunt 14y ago|1 comments
66.
by troyhunt 14y ago
"What if you have something you have to check on a computer where you can't use the tool" You pull out your smart phone with the synced keychain and manually type the password into the PC.
67.
I’d like to share my LinkedIn password with you – here’s why(troyhunt.com)
8 points by troyhunt 14y ago|8 comments
68.
How LogMeIn is enabling scammers to profit(troyhunt.com)
2 points by troyhunt 14y ago|0 comments
69.
Everything you ever wanted to know about building secure password resets(troyhunt.com)
9 points by troyhunt 14y ago|0 comments
70.
Interview with the man behind Comantra, the "cold call virus scammers"(troyhunt.com)
4 points by troyhunt 14y ago|1 comments
71.
“Type www.” – “Ok, w-w-w-d-o-t”; antagonising call centre scammers(troyhunt.com)
1 points by troyhunt 14y ago|0 comments
72.
10 graphic examples of the abomination that is iTunes on Windows(troyhunt.com)
72 points by troyhunt 14y ago|85 comments
73.
10 illustrated examples of Visual Studio 11(troyhunt.com)
1 points by troyhunt 14y ago|0 comments
74.
5 interesting security trends from Verizon’s 2012 data breach report(troyhunt.com)
3 points by troyhunt 14y ago|0 comments
75.
A graphic demonstration of information leakage through security misconfiguration(troyhunt.com)
3 points by troyhunt 15y ago|0 comments
76.
67% of ASP.NET websites have serious config related security vulnerabilities(troyhunt.com)
7 points by troyhunt 15y ago|1 comments
77.
Browsing the broken web: a software developer behind the Great Firewall of China(troyhunt.com)
6 points by troyhunt 15y ago|0 comments
78.
by troyhunt 15y ago
Hmmm... perhaps I should have said "scam-baiting" or "misleading"; but I hope the context is clear.
79.
by troyhunt 15y ago
Good work, I've also emailed Bank of Baroda directly and provided them with the information in my post.
80.
Scamming the scammers – catching the virus call centre scammers red-handed(troyhunt.com)
180 points by troyhunt 15y ago|42 comments
81.
by troyhunt 15y ago
During my testing, I literally had a saved bitmap on my local machine which I reissued many, many times. Obviously this meant it was an exact match on each submission.
82.
by troyhunt 15y ago
Nope, that was only when testing the CAPTCHA cracker console before I'd scripted the ability to pull a live one from the registration page. The bulk cracking was done with fresh loads and the logs show all unique CAPTCHAs.
83.
by troyhunt 15y ago
Interesting insight, thanks for that. I suppose the success of that strategy depends on both the frequency with which CAPTCHAs are reused and the practicality of storing the encoded previous CAPTCHAs (considering the potential volume). In m
84.
Breaking CAPTCHA with automated humans(troyhunt.com)
51 points by troyhunt 15y ago|46 comments
85.
Zappos, Stratfor, Sony, Gawker; Now start using a password manager(troyhunt.com)
3 points by troyhunt 15y ago|0 comments
86.
ASP.NET session hijacking with Google and ELMAH(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
87.
Has the hash DoS patch been installed on your site? Check it right now(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
88.
5 website security lessons courtesy of Stratfor(troyhunt.com)
4 points by troyhunt 15y ago|0 comments
89.
Free eBook: OWASP Top for .NET developers(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
90.
Beyond YSlow - Squeeeezing out website network performance(troyhunt.com)
3 points by troyhunt 15y ago|0 comments

More ›