How securely do they store user passwords & how good are they at letting us know? And how do *you* store passwords? A project by Michal Špaček @spazef0rze
In your questions, asking
Joined February 2018
- Tweets169
- Following1
- Followers438
- Likes46
Password Storage Rating retweeted
This is a great episode learning about @PasswordStorage and how it grades a company's effectiveness in password storage. Would be really interesting to see if this concept could be used in other ways to encourage cybersecurity transparency?
@spazef0rze gave a talk at #BSidesLV in 2014 that turned into the @PasswordStorage project 2 years later.
Happy 3rd (or 5th) Birthday, PasswordStorage! 🎂🥳🎙🎧
#Blackhat #BlackHat2019 #Defcon #DEFCON27 #BSidesLV2019 #password #passwords
Password Storage Rating retweeted
Always use the latest pw storage techniques to protect your customers data. We at @MewsSystems use bcrypt and we don’t hide it: pulse.michalspacek.cz/passwo…
Hiding it doesn’t increase its security, just means something is not right.
🚨UPDATE: T-Mobile now says "encrypted passwords" were compromised in latest data breach.
We obtained a sample of one "encrypted password" and turns out it may be a Base64 string that decodes to a MD5 hash. In other words, it could potentially be cracked. motherboard.vice.com/en_us/a…
Password Storage Rating retweeted
GitHub has disclosed they use bcrypt already back in 2013, good to know they are not afraid to tell us. Here's a @PasswordStorage record: pulse.michalspacek.cz/passwo…
Password Storage Rating retweeted
@spazef0rze I just wrote an article on @zapier 's great documentation and they do have their password storage approach listed publicly: zapier.com/help/data-privacy…. Thoughts on giving them a rating on @PasswordStorage ? allthingsauth.com/2018/04/02…
Password Storage Rating retweeted
I am very happy to see @plntxtoffenders back in the game! With new people behind the account, there is no doubt (unfortunately) their work on exposing bad password practices is still very much a thing!
Please follow & contribute to them! – at Mons, Norway
Password Storage Rating retweeted
Máte e-shop? A mohl bych ho vidět? Zajímá me jak ukládáte hesla. To je ale nečekané, že. Koukněte na hodnocení ukládání pulse.michalspacek.cz/passwo… a pokud byste dostali A nebo B tak se pochlubte. Pokud C-F, tak to opravte a pak se pochlubte.
#ESSE18
Password Storage Rating retweeted
Zdravím @ABRASoftware, tady ten obchod využívá ABRA e-shop a ukládá hesla v čitelné podobě, hesla tedy nejsou zabezpečena. Proč takovou možnost nabízíte? xitter.cf/spazef0rze/status/9640…
And the Czech version of the same site e-shop.leaderfox.cz and the email, too. Again, says registration confirmation but it's a forgotten password. I'm sad.
