• Security is quality under attack. Hard-won lessons in software security, from someone who built the programs and wrote the standards.

brute force attack

Common passwords blacklist

Any system that implements password authentication must check whether the passwords are not too common. Every system faces the brute-force attacks that try one or another list of most common password (and usually succeed, by the way). The system must have a capability to slow down an attacker by any means available: slowing down system ...

Read More