❇️ What is password salting ?

Password salting is a technique to protect passwords stored in databases by adding a string of 32 or more characters and then hashing them. Salting prevents hackers who breach an enterprise environment from reverse-engineering passwords and stealing them from the database.

Password salting increases password complexity, making them unique and secure without affecting user experience. It also helps prevent hash table attacks and slows down brute-force and dictionary attacks.

❇️ Password hashing and why salting is required

Hashing prevents passwords from being exposed or stolen by threat actors, since they are not stored as plaintext. For example, when users create an account with a username and password on a website, their password is hashed and stored in an internal file system in an encrypted form.

When users log in, the password runs through a one-way hashing algorithm that converts the password into a different and unrecognizable string of characters. During login, this string is compared to the other hashes stored in the website's database. If the credentials match the stored hash, users can access the account. If it doesn't match, hash verification fails, and users are not able to log in.

Share and Support

@hacunion

PEOPLE WHO R INTERESTED IN CRYPTO TRADING JOIN HERE FOR FREE CALLS. @sncryptotrade https://www.tg-me.com/sncryptotrade
https://www.tg-me.com/sncryptotrade

@hacunion

❇️ What is OTP token ?

A one-time password token (OTP token) is a security hardware device or software program that is capable of producing a single-use password or PIN passcode.

One-time password tokens are often used as a part of two-factor and multifactor authentication. The use of one-time password tokens hardens a traditional ID and password system by adding another, dynamic credential.

Depending upon the vendor, an OTP token will generate a PIN synchronously or asynchronously. Synchronous tokens use a secret key and time to create a one-time password. Asynchronous tokens use a challenge-response authentication mechanism (CRAM).

In the past, OTP security tokens were usually pocket-size fobs with a small screen that displayed a number. The number changed every 30 or 60 seconds, depending on how the token is configured and the user entered his or her user name and password, plus the number displayed on the token.

Today, OTP tokens are often software-based, and the passcode generated by the token is displayed on the user's smartphone screen. Software tokens make it easier for mobile users to enter authentication information and not have to keep track of a separate piece of hardware.

Credit : CyberExploit

Share and Support

@hacunion

❇️ What is an image replay attack ?

An image replay attack is the use of a picture to fool an authentication method.

Image replay attacks are most commonly used by an attacker trying to gain entry to a system protected by less-than-secure biometric authentication technology implementations. The method has been used successfully against low-end fingerscanners, iris scanners and facial recognition systems.

In the simplest cases, image replay attacks involve a printed image of the subject used for authentication. An attacker might, for example, present a picture of an authorized user to a facial recognition system. Extra measures can be implemented in facial recognition and iris scans to foil printed or static images, however; such measures include requiring the user to wink, blink or speak.

More sophisticated image replay attack methods may involve recorded video and audio playback to defeat these measures. Methods of defeating these attacks exist as well, however. Video and audio are typically out of sync to a detectable degree when played back from a file. Security algorithms have been created to detect the discrepancy and prevent these attacks.

Making biometric authentication methods secure from image replay attacks can't rely on the methods used to detect data replay attacks. (The opposite is also true.) When security is important, it is advisable for administrators to be aware of both attack methods and counter measures.

Credit : CyberExploit

Share and Support

@hacunion

russian CCTV ip

http://85.113.43.162:8080
http://85.113.43.162:60001
http://81.1.214.153:8082
http://185.108.197.149:85
http://87.103.243.139:8081
http://82.200.10.135:60001
http://82.200.50.130:85
http://46.19.187.124:80
http://46.42.19.119:80
http://213.87.53.33:9091
http://31.173.130.246:80
http://212.220.110.69:80
http://89.248.118.232:80
http://212.59.96.203:80
http://95.129.138.206:84
http://46.160.244.155:82
http://46.160.244.155:81
http://185.197.35.124:80
http://195.9.252.114:80
http://176.114.128.106:80
http://188.235.139.93:60001
http://94.228.195.80:60001
http://37.61.183.56:80
http://77.244.26.37:8080
http://82.200.29.10:86
http://91.217.109.9:80
http://185.61.254.5:60001
http://79.111.4.3:80
http://195.122.250.199:8081
http://188.170.161.225:8080
http://77.235.215.198:80
http://91.221.174.223:80
http://83.69.183.213:84
http://83.69.183.213:82
http://83.69.183.213:83
http://95.31.38.219:8081

@hacunion

​​❇️ What is DDoS attack ? And how to do DDoS attack on any website

🌀In this article I will show you what is ddos attack and how to do it by staying anonymous

⭕️Link : https://telegra.ph/What-is-DDoS-attack-and-How-to-perform-DDoS-attack-on-any-Website-03-09

Share and Support

@hacunion