downtown_ on HN Glance

A webshell and a normal file that have the same MD5 10 months ago

This is not related to password hashing.,.

U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise 6 years ago

You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.

0Thread HN

U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise 6 years ago

You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.

0Thread HN

CyberChef – Cyber Swiss Army Knife 7 years ago

https://github.com/usdAG/cstc this implements This as a burp plugin. A few Colleagues developed this and released it two weeks ago at defcon

0Thread HN

SaaS CTO Security Checklist 7 years ago

No. You can use NIST guidance and are not required to change your password every 90 days

0Thread HN

Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M 8 years ago

No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA

0Thread HN