Slide Show: 10 Password Database Fails
Evernote's most recent password breach is the same refrain from a song the industry has been singing for a while -- check out some of the worst password cache compromises
Last week, online notetaking firm Evernote sent a password reset notice to all 50 million of its users after it discovered that hackers had breached internal account information databases to steal encrypted username and password combinations. Though the firm did put some level of cryptographic protection in place by using a salted MD5 hash, experts have criticized that as an easily brute-forced method of encryption and not nearly as effective as something like bcrypt, scrypt, or PBKDF2, which are designed to slow the number of automated guesses a hacker can make per second.
Free Research and Reports
- Three Principles to Improve Data Security and Compliance
- Aligning IT with strategic business goals: A proactive approach to managing IT risk to your business
- Connecting the Dots: Are You Seeing the Complete Big Data Picture?
- How crowdsourced testing has changed the game for innovative software companies
- Ensuring Your Apps Work in the Real World
- The Language of UX: Beyond Buzzwords -
- Get practical information on how to develop your organization's mobile commerce application - Mobile Commerce World - Mobile Commerce World
- Explore best practices for marketers in the new mobile world - Mobile Commerce World - Mobile Commerce World
- Learn how to best integrate mobile commerce with your current systems -- Mobile Commerce World - Mobile Commerce World
- The A-to-Z of Building Your Big Data Initiative - E2 Conference Boston - E2 Conference Boston