doweseeit.com

passwordanalytics.com

Why Now?

http://www.passwordanalytics.com/theory/why/why-now.php

You are here theory. Hidden Proc. Detection. Hidden Reg. Detection. Hidden Ser. Detection. Kaffe News Secure Gossip.

passwordanalytics.com

Bruteforcing Passwords

http://www.passwordanalytics.com/theory/security/bruteforce.php

You are here theory. Setting minimum length of passwords(8 or above). Setting the maximum number of passwords tries/attempts(5 to 10). Not allowing previously used passwords(for atleast 3 consecutive changes). Forcing password changes every 90 days. Forcing the user from giving consecutive letters of same case. Forcing users from giving numbers at the beginning or end of the password. Bruteforcing passwords (internally) and finding your own (and your users) weaknesses. And other unlisted things.

passwordanalytics.com

Introduction to Passwords

http://www.passwordanalytics.com/theory/passwords/index.php

You are here theory. Passwords are secrets that stay secretive to an individual who intends to use it to authenticate oneself. In this section, users will have the opportunity to learn:. Hidden Proc. Detection. Hidden Reg. Detection. Hidden Ser. Detection. Kaffe News Secure Gossip.

passwordanalytics.com

Passwords on the wire

http://www.passwordanalytics.com/theory/security/passwords-on-the-wire.php

You are here theory. Passwords on the wire. Instant Messaging [MSN, Yahoo, Live, etc.]. 3rd Party Instant Messaging [Trillian, Adium, etc.]. FTP Tools [Pure-FTPd, etc.]. SSH Tools [WinSCP, etc.]. Applications that run on Browser [Email Accounts(gmail, Yahoo! Etc) and other applications]. To zoom in - click the image*. Sessions and Streams for Initial Handshake. The following is the expanded view of the first traffic log of what you see in Figure 1 [in the above snapshot]:. Time : 0.809550. 0 = LG bit: Gl...

passwordanalytics.com

Man-in-the-Middle

http://www.passwordanalytics.com/theory/security/mitm.php

You are here theory. Man-in-the-Middle[MITM] attacks have become more common in the past decade. This is because, attackers try and gain access to complicated systems through simple means of intercepting traffic. In PasswordAnalytics, we wanted to discuss about MITM because it is one of the ways where attackers intercept passwords sent over the wire. There are several ways to achieve the same MITM attack. Some of them include [and is not limited to]:. Hidden Proc. Detection. Hidden Reg. Detection.

passwordanalytics.com

Socialize

http://www.passwordanalytics.com/socialize/socialize/index.php

You are here socialize. Our plan is to socialize and spread the wealth (research findings) to help improve our community. Twitter is one among the leading socializing portal, that helps us share links, tiny data, etc. with our tweets. You are most welcome to follow us, or Re-tweet us to help us spread the word. We like you. We wish to stay connected. Would you mind joining us and getting connected to us. If so, click on this link that would take you to our linkedin group. Hidden Proc. Detection.

passwordanalytics.com

Weak Encryption

http://www.passwordanalytics.com/theory/security/weak-encryption.php

You are here theory. Weak Unique/Secret Key used. Key shared among many people. Known plain-text cipher-text pair. Known plain-text and key. Known key and cipher. Even though hashing is irreversable process, there is a new kind of attack that just was released few years back. This is called Hash-collission. Hash-collision is something where you have two values or two different data, producing the same hash value. Why would this be useful in an attack? Hidden Proc. Detection. Hidden Reg. Detection.

passwordanalytics.com

Why?

http://www.passwordanalytics.com/theory/why/index.php

You are here theory. In this section, users would learn more about the reasons for using password based authentication, as opposed to other authentication systems. Check it out by clicking HERE. Or click from the left-menu). This reasons out why we needed a separate site such as Password Analytics. We also tried putting together some content on, how this would help the different types of users out there. Check it out by clicking HERE. Or click from the left-menu). Or click from the left-menu).

passwordanalytics.com

Cracking 101

http://www.passwordanalytics.com/theory/passwords/cracking-101.php

You are here theory. Introduction to Password Cracking. Introduction to Password Cracking. Implementation of the algorithm. Properties of the password recovery system [processing power, RAM, multi-threading, multi-processing, multi-core, etc.]. Sometimes] Knowledge of the person running the cracking tool. Situation that the password cracker is at - The need. Top 10 Password Crackers - http:/ sectools.org/crackers.html. Hidden Proc. Detection. Hidden Reg. Detection. Hidden Ser. Detection.

passwordanalytics.com

Strength 101

http://www.passwordanalytics.com/theory/passwords/strength-101.php

You are here theory. What makes a weak password? Password strength has been a major focus for the past few decades in the arena of authentication. This is because passwords still can be protected from the attackers, if they are chosen well. Thousands of attackers have been cracking [bruteforce, rainbow technique, etc.] passwords across the world in order to:. Gain access to sensitive content. Attack someone and bring them down. Just educate themselves by doing it at random. Length of the password. Let us...