#password

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in through ForgeRock, an identity platform now part of Ping Identity, and on those servers the researchers reached an

The Hacker News · EN

Filen's password onion made me cry

Filen hashes passwords with MD5(MD4(MD2(pwd))). This post shows several cryptographic weaknesses in their protocol and questions if it's even worth doing end-to-end encryption delivered through a webpage.

Pascal Schärli · EN

You're a Dumb Security Leader if You Mandate Password Rotation

NIST, Microsoft, and the FTC all agree: forced password rotation makes you less secure.

George Guimarães. · EN