Hacking on Medium
10 Ways to Protect Your Online Privacy

https://cdn-images-1.medium.com/max/2600/1*ojUOoQkfcsxDs4rz9kaaRA.jpeg
As the internet continues to evolve and play a larger role in our daily lives, protecting our online privacy has become increasingly…

Continue reading on Medium »

Hacking on Medium
OverTheWire Wargames: Bandit L12

https://cdn-images-1.medium.com/max/2600/1*qkK4azW7HZSKiGhU9LHtyA.jpeg
Bandit Level 12 Write-Up

Continue reading on The Gray Area »

Hacking on Medium
Hashcat İle Hash Kırmak

https://cdn-images-1.medium.com/max/1083/1*SxqZzW2b84RIWZo-z4enOg.png
Hashcat Nedir?

Continue reading on Medium »

Hacking on Medium
Cisco advierte sobre una falla sin parchar de alta gravedad que afecta el firmware de teléfonos IP

https://cdn-images-1.medium.com/max/1808/0*Ln3PSmvFRowIuGse
Cisco ha lanzado una nueva advertencia de seguridad sobre una falla de alta gravedad que afecta el firmware de los teléfonos IP de las…

Continue reading on Medium »

PII data exfiltration within minutes
https://0xmayankgarg.medium.com/pii-data-exfiltration-within-minutes-f06d4587d201?source=rss------bug_bounty-5

Hello Everyone,Continue reading on Medium » (https://0xmayankgarg.medium.com/pii-data-exfiltration-within-minutes-f06d4587d201?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Shopify Plus Stores Can Easily Add Passwordless Login With Passkeys Support

Shopify Plus stores can now easily implement passwordless login with Passkeys support to help reduce drop rate and increase conversion using the free OwnID plug-in.

Dark Reading: Attacks/Breaches
Nearly 4,500 Pulse Connect Secure VPNs Left Unpatched and Vulnerable

Pulse Connect VPN server software received several updates over the years, and thousands of hosts haven't patched.

hacking: security in practice
How feasible is to crack a SHA-1 hash with hashcat / JTR with a consumer grade GPU?

I've searched online on the feasibility of cracking a SHA-1 hash but found a bunch of conflicting information.

I've seen places saying that 8 characters long passwords (even with a healthy mix of upper and lower case letters and numbers) can be cracked by "any hacker" in a few hours / a day at most. SHA-1 is supposedly an insecure algorithm, so I figure it applies.

But I also saw places saying that a consumer grade GPU cannot hope to crack an 8 character hash in a reasonable amount of time. So which is it? Are the "hackers" people were talking about using cluster computing and specialized hardware?

I'm trying to crack random publicly available SHA-1 password for practice, and I'm getting around 25000Kp/s on JTR. What should be my expectations? Thank you in advance.

submitted by /u/kazuhira_rm
[link] [comments]

hacking: security in practice
Fbook live chat support button only able to be clicked on by certain people

So I have a business page on facebook, and I have an ad running. This means that I should in theory be able to access live chat support because I am a paying customer who has purchased an advertisement. I’ve had it running for more than 48 hours now, and there is a button called «get started» that in many youtube videos is shown to lead to a live chat option with someone working for facebook for those with a businnes page who have ads. This is in the meta business help centre. I can see the button, but when I click it nothing happens. I read somewhere that it is only available for US and UK right now, and I don’t live there so I tried a VPN, but that did not solve the issue. Is anyone willing to aid me in this, how I can somehow make the button clickable for my page? Any ideas I could try?

submitted by /u/throwawayannoyying
[link] [comments]

hacking: security in practice
What to Expect with Stolen Email

I figured this would be the best place to ask what to expect when someone takes your leaked email address. I posted on here a while ago that my email got leaked and asked for tips to protect myself. I managed to eff up one of their Google ads a week or so back because everything is tied to my Google email and it was easy to access and kick them out. No other information has been stolen, my bank hasn't been touched, nor has my other accounts been compromised. Just today I got an email from Amazon that a purchase was made with my email, but they didn't use my bank or any other concerning accounts. I, of course, effed that one up too after making sure it was legit. At this point I'm trying to figure out what's next, what should I expect? I have the option of closing my email for good but I'd hate to do that and I'm sure whoever has my leaked email is hating me right now, which can be an issue for the future.

P.s. all passwords have been changed and I have a password manager

submitted by /u/Grand-Diddy
[link] [comments]

hacking: security in practice
Can an IP adress be linked to your account ?

Hello ! Let's say my ip adress got leaked. Can a third party (not government nor ISP) find all my accounts linked to this IP ? By hacking databases and such ?

Thanks

submitted by /u/BarduumTV
[link] [comments]

hacking: security in practice
Are cheapo U2F/FIDO keys actually secure?

I see that adafruit is selling U2F keys *really* cheap -- $10 each, and there's basically nothing else on the market until $30. I bought one and it seems to work fine. But I don't know enough about the protocols to know how safe that is. Are cheap U2F keys likely to be insecure or backdoored? Or is the whole process strong enough that I can trust them?

submitted by /u/wmlloydfloyd
[link] [comments]