Think of a typical web application where the users log in, and then the session is kept with a session key. Is it possible to protect it from all kinds of sniffing-based attacks without HTTPS or its equivalent?
Let's say I'm not worried about data transfer, only password or session theft.
Assume that you want to give some web users privileged access to your website, but that you are unable (or unwilling) to offer SSL to all of them - at least past the initial login page.
In this instance, is there some way to manage the user session that will negate FireSheep, but not create a pa...
Bruteforce tries cracking the hash with every possible combination of letters.
Then, If I'll use an special Unicode char, as ♥ or ¿, will it increase my security?
I'm talking about NTLM passwords.
Derivatives as a solution to imbue IT vulnerabilities with economic force appears to be a confused idea with potentially disastrous consequences. The date of the paper on that subject should be considered in its review. In the heady days of 2007 prior to the fat tail event that we now know as t...
@Iszi My goal in pursuing that was to figure out if I was missing anything in the answer, and I think I know now that I wasn't. What do you mean by "shut down", and shouldn't the answer be addressed rather than the question?
Bruteforce tries cracking the hash with every possible combination of letters.
Then, If I'll use an special Unicode char, as ♥ or ¿, will it increase my security?
I'm talking about NTLM passwords.
Derivatives as a solution to imbue IT vulnerabilities with economic force appears to be a confused idea with potentially disastrous consequences. The date of the paper on that subject should be considered in its review. In the heady days of 2007 prior to the fat tail event that we now know as t...
