John the Ripper (http://www.openwall.com/john) is a well-known and mature password auditing tool. However, if you are working from a recent OS (e.g., Ubuntu 9.04 or later) that uses SHA-512 hashing John has a problem.
(continue reading…)
Cell phones have become ubiquitous in recent times. Everyone has one. Use of the cell phone as an authentication method is not only a convenient method of raising asurrance levels for logins, but it can also be a significant cost savings when compared to traditional methods. (continue reading…)
From a technical perspective, it is easy to see why implementing an Identity and Access Management stack is preferable to manual processes, but we often get requests from clients for business reasons they can sell internally.
(continue reading…)
Considering how security has evolved, it’s surprising that many companies still depend on old technologies and protocols. FTP is one such protocol. FTP is considered by most to be secure. While it can keep users out of areas they don’t belong, and logging activities increases detection for malicious commands, the protocol remains fairly insecure.
(continue reading…)
What is Multifactor Authentication?
Multifactor authentication can best be described as a string of authentication methods
from two or more of the three categories of factors. Considered a form of strong authentication,
Multifactor authentication is used to create a higher form of assurance on protected
assets.
(continue reading…)
What is Two factor authentication?
“Something you have, and something you know.”
(continue reading…)