Posts Tagged Passwords
Intercepting Passwords to Escalate Privileges on OS X
Posted by scriptjunkie in Uncategorized on September 17, 2016
A few weeks ago, a lot of attention was paid to Dropbox for “hacking” macs. Dropbox asked for your admin password when it was installed, then used that root access to enable privileges later even if you try to disable them. Despite the internet’s indignation and Dropbox’s impoliteness, Dropbox wasn’t exploiting any vulnerability or breaking […]
Adding Easy SSL Client Authentication To Any Webapp
Posted by scriptjunkie in /dev/urandom, webapps on November 30, 2013
Let’s face it, if you are using passwords on your web site or application, you are part of the problem. It doesn’t matter if you’re using bcrypt or scrypt, or all the salt in the world, you’re still perpetuating these 11 password problems and pains. But client certificate authentication and even issuance is actually easy with modern browsers. Want to see how easy it can be? Check out the example below.