VirtualTam's bookmarks
32 bookmarks found
-
Have I Been Pwned - Pwned Passwords
2024-02-28 - HaveIBeenPwned/PwnedPasswordsDownloader
- API Clients:
- mattevans/pwned-passwords - Go API Client
- lionheart/pwnedpasswords - Python API Client
- philnash/pwned - Ruby API Client
- wisespace-io/pwned-rs - Rust API Client
-
Passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing-resistant.
- https://fidoalliance.org/passkeys/
- Apple Developer - Passkeys Overview
- Apple Support - About the security of passkeys
- Google Identity - Passwordless login with passkeys
- Google Blog - The beginning of the end of the password
- Google Security Blog - So long passwords, thanks for all the phish
- Chromium BLog - Introducing passkeys in Chrome
- Tailscale doesn't want your password
- Tailscale - Custom OIDC Providers
- YubiKeys, passkeys and the future of modern authentication
- A Yubico FAQ about passkeys
- Why Passkeys Will Be Simpler and More Secure Than Passwords
- Passkeys: A shattered dream
-
The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.
- Guide to Web Authentication
- Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
- Issue 664630: Web Authentication API for Chrome
- Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
- keepassxc#1870 - Feature Request: Integration with the Web Authentication API
-
- https://www.openssh.com/txt/release-7.2
- https://unix.stackexchange.com/questions/269121/openssh-have-ssh-add-keys-to-agent-as-needed
Host blah AddKeysToAgent yes ForwardAgent yes -
- https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
- https://security.stackexchange.com/questions/17421/how-to-store-salt
- https://codahale.com/how-to-safely-store-a-password/
- https://security.stackexchange.com/questions/133239/what-is-the-specific-reason-to-prefer-bcrypt-or-pbkdf2-over-sha256-crypt-in-pass
- https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846
-
- https://github.com/helm/helm/issues/2196
- https://github.com/mozilla/sops
- https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
- https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
- https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
-
-
RabbitMQ - Password Hashing
2018-08-28 - https://www.rabbitmq.com/passwords.html
- https://stackoverflow.com/questions/41306350/how-to-generate-password-hash-for-rabbitmq-management-http-api
- https://gist.github.com/christianclinton/faa1aef119a0919aeb2e
- https://stackoverflow.com/questions/9594125/salt-and-hash-a-password-in-python
- https://docs.python.org/3/library/hashlib.html
- https://docs.python.org/3/library/base64.html
-
KeePass / KeePassX / KeePassXC
2018-05-27 -