A Hacker’s Guide to Password Cracking

November 7, 2024 at 07:42AM The article emphasizes the importance of strong password security to defend against hackers, who exploit weak, commonly used passwords. It discusses the risks of password reuse and suggests adopting longer passphrases, implementing multi-factor authentication, and enforcing strong password policies to enhance organizational security. Users should be educated on best practices. … Read more

NIST Drops Password Complexity, Mandatory Reset Rules

September 26, 2024 at 08:32AM NIST’s latest password guidelines (SP 800-63-4) no longer recommend using a mix of character types or regular password changes. They suggest CSPs stop mandating specific password types and periodic changes, and reduce knowledge-based authentication usage. The new guidelines stress a minimum 15-character length, allowing up to 64 characters, and incorporating … Read more

Why ‘Never Expire’ Passwords Can Be a Risky Decision

September 23, 2024 at 08:06AM The text discusses the impact of password expiry policies, exploring the reasons behind them and the potential drawbacks. It highlights concerns about weak password reuse, IT burden, and compromised password risks. It also suggests implementing a comprehensive password strategy, advocating for longer and stronger passwords alongside measures to detect compromised … Read more

New Password Cracking Analysis Targets Bcrypt

April 24, 2024 at 07:06AM Hive Systems analyzed password cracking through brute-force attacks, shifting from MD5 to Bcrypt. With a dozen NVIDIA GeForce RTX 4090 GPUs, they found that Bcrypt significantly delays cracking times, making strong passwords more secure. However, non-randomly generated passwords can still be breached quickly due to predictability. Hive’s study is based … Read more