Hacker News Reader

downtown_on A webshell and a normal file that have the same MD5

This is not related to password hashing.,.

downtown_on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.

downtown_on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.

downtown_on CyberChef – Cyber Swiss Army Knife

https://github.com/usdAG/cstc this implements This as a burp plugin. A few Colleagues developed this and released it two weeks ago at defcon

downtown_on SaaS CTO Security Checklist

No. You can use NIST guidance and are not required to change your password every 90 days

downtown_on Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M

No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA