downtown_ | 5 months ago | on: A webshell and a normal file that have the same MD5
This is not related to password hashing.,.
downtown_'s comments
downtown_ | 5 years ago | on: U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise
You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.
downtown_ | 5 years ago | on: U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise
You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.
downtown_ | 6 years ago | on: CyberChef – Cyber Swiss Army Knife
https://github.com/usdAG/cstc this implements This as a burp plugin. A few Colleagues developed this and released it two weeks ago at defcon
downtown_ | 6 years ago | on: SaaS CTO Security Checklist
No. You can use NIST guidance and are not required to change your password every 90 days
downtown_ | 7 years ago | on: Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M
No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA
page 1