passwords - Page 1 - Paul Moore

- Feb 18, 2017
- 2fa, multi-factor authentication, biometrics, security, passwords, paste, disable paste, password managers
Don't let them paste passwords...

After months of tweets, emails & articles from eminent figures like Troy Hunt & the NCSC, it's about time I weighed in on the debate surrounding sites...
Read More
- Feb 13, 2016
- snom, cisco, security, privacy, csrf, covert surveillance, voip, remote control, default passwords, passwords, authentication, breach
PwnPhone: Default passwords allow covert surveillance.

A few weeks ago, I was asked to observe an installation of several wireless access points & VoIP phones, with a view to making recommendations on how best...
Read More
- Jan 22, 2015
- aes, data, encryption, infosec, password manager, passwords, privacy, roboform, security, 2fa, authentication
Roboform Security Revisited: Lies, Deception & Misnomers.

You may recall, I recently published an article entitled "How secure is Roboform: The 5 Minute Challenge". Well, 6 months have passed and although there's been...
Read More
- Nov 28, 2014
- 1password, aes, aes128, aes256, decryption, encryption, keepass, lastpass, password manager, passwords, roboform, security, 2fa, 2sv, two factor authentication, directpass, passwordbox, dashlane
Password Managers: Facts, Fallacies & FUD

Ah, passwords. The thought of choosing, remembering and inevitably resetting them is enough to make your blood boil. As a fundamental part of our digital lives...
Read More
- Sep 18, 2014
- hacked, passwords, security, totp, hotp, otp, 2fa, 2sv, two factor authentication, two step verification, authentication
The difference between two-factor and two-step authentication.

No lengthy article this time folks, just a flow diagram to demonstrate the differences between two-factor authentication and two-step verification. (full size)...
Read More
- Aug 31, 2014
- decryption, dpa, encryption, hashing, insecure, passwords, security, virgin media, vulnerable, breaches, hack
Virgin Media: You're only as secure as your weakest link.

Avid followers will know, I've long been an advocate of password managers... specifically 1Password. So much so, I'm often criticised for treating it as a pan...
Read More
- Jan 17, 2014
- banking, encryption, hashing, infosec, passwords, pbkdf2, safety, security, shopping, ssl, wifi
cyberstreetwise.com - Really bad #infosec advice.

Be Cyber Streetwise is a cross-government campaign, funded by the National Cyber Security Programme, and delivered in partnership with the private and v...
Read More
- Jul 20, 2013
- cashplus, cookies, encryption, insecure, passwords, security, ssl
CashPlus: "It is secure" - Ooooh no it isn't.

As part of a wider research project, I joined CashPlus in June (18th to be precise), which is purportedly... better than a business bank account So I paid t...
Read More
- Jul 16, 2013
- 1password, aes128, aes256, encryption, HMAC, keepass, lastpass, passwords, pbkdf2, security, ssl
Forgot your password? You're doing it wrong.

Have you ever struggled to remember a username or password? Join the club. Wouldn't it be great if you could log in to every site using the same password, with...
Read More
- Mar 12, 2013
- acl, cookies, mydish, passwords, security, sqli, ssl, xsrf, xss
MyDish.co.uk Security - Missing a vital ingredient?

Update as of 15/03/13: I have received a number of emails asking for further comments on the situation @ MyDish. I firmly believe that every effort is being ma...
Read More