Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Password management, Authentication, Security. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Cryptocurrency, Cybersecurity, Tech... > Cybersecurity, Web Development, Net... > Authentication, Encryption, Identit... > Password management, Authentication...

Articles

The quest for a family-friendly password manager

See discussion (137 comments, 111 points) - Archive

Zero Trust SIM

See discussion (276 comments, 379 points) - Archive

Typical implementations of payment processing and related security issues

See discussion (57 comments, 211 points) - Archive

Are Magic Links Outdated?

See discussion (224 comments, 135 points) - Archive

The Personal Security Checklist

See discussion (112 comments, 253 points) - Archive

What is the purpose of check-in before flying? (2014)

See discussion (76 comments, 165 points) - Archive

All Bitcoin private keys are on this website

See discussion (366 comments, 426 points) - Archive

Microsoft ruined passwords, now aims for a passwordless future

See discussion (312 comments, 250 points) - Archive

OWASP Top 10 2021

See discussion (70 comments, 360 points) - Archive

A future without passwords

See discussion (223 comments, 105 points) - Archive

A bug related to handling of authenticated sessions

See discussion (47 comments, 215 points) - Archive

Security.txt

See discussion (165 comments, 746 points) - Archive

Show HN: Doppler Share – Share one-off secrets with end-to-end encryption

See discussion (21 comments, 90 points) - Archive

OWASP Cheat Sheet Series

See discussion (29 comments, 301 points) - Archive

Double Blind Passwords a.k.a. Horcruxing

See discussion (181 comments, 336 points) - Archive

Encryption Lava Lamps (2017)

See discussion (92 comments, 107 points) - Archive

Buying a single character domain – and 3 character FQDN – for £15

See discussion (118 comments, 260 points) - Archive

Let them paste passwords (2017)

See discussion (126 comments, 186 points) - Archive

Show HN: 100% offline Shamir's Secret Sharing GUI

See discussion (67 comments, 180 points) - Archive

LastPass stores passwords so securely, not even its users can access them

See discussion (256 comments, 257 points) - Archive

API Security Best Practices

See discussion (4 comments, 115 points) - Archive

OWASP Cheat Sheet Series

See discussion (14 comments, 108 points) - Archive

Why are the username and password on two different pages?

See discussion (157 comments, 181 points) - Archive

WordPress 5.2: Mitigating Supply-Chain Attacks

See discussion (37 comments, 107 points) - Archive

Website Database Security (2018)

See discussion (20 comments, 88 points) - Archive

Security.txt (2017)

See discussion (54 comments, 161 points) - Archive

How to break the most popular cryptocurrency hardware wallets

See discussion (5 comments, 81 points) - Archive

A well-known URL for changing passwords

See discussion (172 comments, 749 points) - Archive

JavaScript is now required to sign in to Google

See discussion (499 comments, 593 points) - Archive

Windows gifski.exe with a digital signature

See discussion (100 comments, 230 points) - Archive

Enterprise Information Security (OpenSSH, IAM, Fundamentals, and More)

See discussion (9 comments, 93 points) - Archive

Best practices for user account, authorization and password management

See discussion (156 comments, 321 points) - Archive

Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past

See discussion (90 comments, 139 points) - Archive

A wall of lava lamps helps encrypt the internet

See discussion (151 comments, 356 points) - Archive

“Username or password is incorrect” is bullshit

See discussion (162 comments, 244 points) - Archive

Bypassing Browser Security Warnings with Pseudo Password Fields

See discussion (120 comments, 175 points) - Archive

Security.txt

See discussion (141 comments, 705 points) - Archive

On Password Managers

See discussion (336 comments, 393 points) - Archive

NIST Random Beacon

See discussion (59 comments, 123 points) - Archive

API Security Checklist for developers

See discussion (69 comments, 321 points) - Archive

Updates for older platforms to protect against potential nation-state activity

See discussion (111 comments, 110 points) - Archive

Let them paste passwords

See discussion (365 comments, 694 points) - Archive

DocuSign email address database breached and used for phishing campaign

See discussion (137 comments, 343 points) - Archive

PSA: LastPass Does Not Encrypt Everything in Your Vault

See discussion (157 comments, 161 points) - Archive

Moving beyond localStorage

See discussion (58 comments, 208 points) - Archive

Latacora: Security Programs For Startups

See discussion (52 comments, 98 points) - Archive

A practical security guide for web developers

See discussion (68 comments, 894 points) - Archive

MitM Attack against KeePass 2’s Update Check

See discussion (75 comments, 125 points) - Archive

1Password Leaks Your Data

See discussion (151 comments, 291 points) - Archive

Bank harrasses user because he tweeted screenshot of their SSL certificate

See discussion (66 comments, 163 points) - Archive

Authentication Cheat Sheet

See discussion (150 comments, 307 points) - Archive

Ignoring the amount customers confirm is no security bug according to PayPal

See discussion (36 comments, 173 points) - Archive

Announcing Project Zero

See discussion (81 comments, 360 points) - Archive

OWASP Top Ten Web Vulnerabilities

See discussion (30 comments, 82 points) - Archive

CryptoCat iOS Application Penetration Test [pdf]

See discussion (131 comments, 168 points) - Archive

NIST Randomness Beacon

See discussion (63 comments, 97 points) - Archive

Why do credit card forms ask for Visa, Mastercard, etc.?

See discussion (96 comments, 120 points) - Archive

Don't use autofill in your browser

See discussion (68 comments, 129 points) - Archive

How Browsers Store Your Passwords (and Why You Shouldn't Let Them)

See discussion (81 comments, 148 points) - Archive

Learn Web Penetration Testing The Right Way

See discussion (24 comments, 151 points) - Archive

Why are payment forms so complicated?

See discussion (166 comments, 245 points) - Archive

Bypassing Google’s Two-Factor Authentication

See discussion (70 comments, 180 points) - Archive

Megafail

See discussion (198 comments, 738 points) - Archive

The definitive guide to forms based website authentication

See discussion (73 comments, 338 points) - Archive

Web App Security Best Practices

See discussion (32 comments, 88 points) - Archive

Keeping the Trans Pacific Partnership from changing our copyright laws

See discussion (42 comments, 113 points) - Archive

W3C Proposal from MS, Google, Netflix for adding copy protection API to html5

See discussion (102 comments, 108 points) - Archive

Zappos.com customer database compromised

See discussion (89 comments, 199 points) - Archive

Mozilla's secure coding guidelines for web developers

See discussion (65 comments, 250 points) - Archive

The Definitive Guide To Website Authentication

See discussion (54 comments, 319 points) - Archive

Firesheep: Easy HTTP session hijacking from within Firefox

See discussion (341 comments, 714 points) - Archive

My GMail password scares me with its power

See discussion (45 comments, 86 points) - Archive

Minibone: practical end-to-end encryption for web apps

See discussion (67 comments, 88 points) - Archive