article thumbnail

World Password Day is Dead. Long Live World Password Day!

The State of Security

In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. The post World Password Day is Dead. The post World Password Day is Dead.

article thumbnail

RSAC Fireside Chat: A breakthrough in securing cloud collaboration — decentralized key storage

The Last Watchdog

Back in 2002, when I was a reporter at USA Today , I had to reach for a keychain fob to retrieve a single-use passcode to connect remotely to the paper’s publishing system. This iteration of my old-school keychain fob thus eliminates the need for usernames and passwords while much more robustly protecting sensitive data, Nagarjuna asserts.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

World Password Day is Dead. Long Live World Password Day!

Security Boulevard

In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. The post World Password Day is Dead. The post World Password Day is Dead.

article thumbnail

Do You Trust Your SIEM?

Anton on Security

you trust the SIEM to map the events to the correct category and not to confuse “password guessing” with “logon failure” or whatever You then trust that the detection logic (rules) is written correctly so that nobody mistyped “context.asset.vulnerability.severity” as “asset.context.vulnerability.severity” in a rule they wrote.

Passwords 257
article thumbnail

Implementing Password Security

SiteLock

Seems like every few months another blogger or security maven laments the passing of the password, a security tool that has outlived its usefulness and should now be replaced with something more of the times, more effective, more secure. And while the password might be on life-support, it’s not quite gone. That’s right.

article thumbnail

Why Your VPN May Not Be As Secure As It Claims

Krebs on Security

Woodcock said Option 121 has been included in the DHCP standard since 2002, which means the attack described by Leviathan has technically been possible for the last 22 years. “They create a password-locked LAN with automatic network address translation,” the researchers wrote of cellular hot-spots.

VPN 324
article thumbnail

A bug is about to confuse a lot of computers by turning back time 20 years

Malwarebytes

This would mean Network Time Protocol (NTP) servers using the broken GPSD versions would think it’s March 2002 instead of October 2021. Authentication mechanisms such as Time-based One-Time Password (TOTP) and Kerberos also rely heavily on time. How bad is it? Various businesses and organizations rely on these systems.