troyhunt

15 ms·

91.
OWASP Top for .NET developers part 9: Insufficient Transport Layer Protection(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
92.
To the cloud Performance testing ASafaWeb with AppHarbor & Blitz(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
93.
5 minute wonders: From zero to hero with AppHarbor(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
94.
by troyhunt 15y ago
Sure, but firstly, you know they're tracking you (the degree of iOS tracking would be a big surprise to many) and secondly, you can disable the tracking if it bothers you (not so in iOS).
95.
Secret iOS business; what you don’t know about your apps(troyhunt.com)
168 points by troyhunt 15y ago|57 comments
96.
Anatomy of a virus call centre scam(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
97.
5 minute wonders: The ASP.NET membership provider(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
98.
Why is Gootkit attacking my website and what can I do about it?(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
99.
Automated data syncing with SQL Data Compare and TeamCity(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
100.
by troyhunt 15y ago
Unfortunately having your PI spread over the internet is now an inevitability, if not through your banking then through your shopping or through your social interactions. We all have our PI smeared out over the web to varying degrees, just
101.
by troyhunt 15y ago
Security by obscurity and a perfect example of failure to restrict URL access: http://www.troyhunt.com/2011/08/owasp-top-10-for-net-develop... These URLs are exposed in all sorts of places; browser history, proxy servers, web server logs
102.
by troyhunt 15y ago
Ah, this is true but you've just made a very big leap from simply obtaining a password to now successfully installing a rootkit and key logger and obtaining both the keychain and password. We could go back and forth about the likelihood of
103.
by troyhunt 15y ago
"A leaked password manager password, on the other hand, could have the attacker using your logins for months" That's only half the story as without the password keychain (in the 1Password example), the master password itself it useless. So
104.
by troyhunt 15y ago
Things like shopping and social media add up before you know it and it's only once you actually start tracking them do you realise how many you have. Think of just the really globally common shopping stuff (eBay, Amazon, Go Daddy), then add
105.
by troyhunt 15y ago
Oh dear, maybe read through the rest of the article first.
106.
I’m sorry, but were you actually trying to remember your comical passwords?(troyhunt.com)
112 points by troyhunt 15y ago|86 comments
107.
Overcoming SQL 08's globally insensitive time zones using .NET(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
108.
OWASP Top for .NET developers part 8: Failure to Restrict URL Access(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
109.
The padlock icon must die(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
110.
The science of password selection(troyhunt.com)
5 points by troyhunt 15y ago|1 comments
111.
Taking the pain out of database discovery with Red Gate’s SQL Search(troyhunt.com)
1 points by troyhunt 15y ago|0 comments
112.
OWASP Top for .NET developers part 7: Insecure Cryptographic Storage(troyhunt.com)
2 points by troyhunt 15y ago|0 comments
113.
by troyhunt 15y ago
That's great, now what about my iPad? And iPhone? And Android device? And etc. and etc.
114.
by troyhunt 15y ago
Not quite - it's actually TWO THIRDS that used identical passwords. Nasty.
115.
A brief Sony password analysis(troyhunt.com)
182 points by troyhunt 15y ago|70 comments
116.
A Guide to Using Passwords Without Distraction(filterjoe.com)
3 points by troyhunt 16y ago|2 comments
117.
Bad passwords are not fun and good entropy is always important(troyhunt.com)
7 points by troyhunt 16y ago|2 comments
118.
by troyhunt 16y ago
It's a bit hard to know where to begin responding to the number of inaccuracies in the original post. So here's a complete summary: http://www.troyhunt.com/2011/04/bad-passwords-are-not-fun-an...
119.
by troyhunt 16y ago
So what do you do when the website doesn't allow those characters in your password? It happens frequently: http://troy.hn/dJbdTU
120.
by troyhunt 16y ago
Actually, the article explicitly mentions that problem: "Undoubtedly, much of this problem is related to poor security implementations on websites. It’s very, very easy to build websites with fundamental security flaws." But obviously this

More ›