There were roughly 30 Street teams that participated in Korelogic’s 2020 Crack Me If You Can password cracking contest at Defcon. I took 4th place.

It was a cold Wednesday morning, about ten ‘til eight. I had been in the office a few minutes when the phone rang. Hello. “Yes, hi, the server has been hacked!

There’s an old quip about solutions causing more problems: Some people, when confronted with a problem, think “I know, I’ll use regular expressions.” Now they have two problems.

Zoom is software that facilitates remote meetings and collaboration. Its popularity soared in 2020 due to the COVID-19 pandemic. It has also been the focus of increased privacy and security concerns.

Since I seldom need the functionality provided by oathgen (a complete HOTP/TOTP implementation), I typically use goathgen. Goathgen is a simple TOTP library and command line executable written in Go.

Oathgen is a command line HOTP and TOTP one-time password generator for BSD, Linux, Mac and Windows operating systems. The goal of oathgen is to be complete, standard and portable.

Padder can encrypt and decrypt small messages using one-time pads. It can also generate fake pads so that one encrypted message can be decrypted to multiple, different plaintexts.

Understanding basic password types will help you devise a strong password management strategy for all of your accounts. In general, and at a high-level, there are two basic types of passwords.

I once worked in highly regulated environments and needed a way to recall dozens of complex passwords that changed frequently. I tried to use a password manager, but could not due to the burdens and insecurity of some common design flaws.

I was curious to know how many popular websites have already uploaded a security.txt file and how many followed the most recent draft. So, I wrote a small Go program to check the Alexa Top 1 million websites.