RESOURCES
National Institute of Standards and Technology (NIST)
- Surprising New Password Guidelines from NIST, PasswordPing Ltd. ©2017
- The man who put us through password hell regrets everything, Swapna Krishna, Engadget
- NIST’s new password rules – what you need to know, Chester Wisniewski, Naked Security
- Shift in password strategy from NIST, Greg Masters, SC Media
Real-World Stories
- Introducing 306 Million Freely Downloadable Pwned Passwords, troyhunt.com
- Former St. Louis Cardinals Exec Gets Four-Year Prison Sentence for “Hacking” Astros' Database, Elliot Hannon, Slate
- Feds: Cardinals Hacker Probably Leaked To Deadspin As Revenge For Astros' Sports Illustrated Cover, Lindsey Adler, Deadspin
- Security! experts! slam! Yahoo! management! for! using! old! crypto!, Darren Pauli, The Register
- Yahoo breach: I’ve closed my account because it used MD5 to hash my password, Mark Stockley, Naked Security
- Why You Shouldn't Panic About Dropbox Leaking 68 Million Passwords, Thomas Fox-Brewster, Forbes
- 51 Million iMesh Passwords Dumped Online, Paul Wagenseil, Tom's Guide
- Hack Brief: Your Old Myspace Account Just Came Back to Haunt You, Brian Barrett, Wired
- Cisco inadvertently weakens password encryption in its IOS operating system, Lucian Constantin, InforWorld
- More Password Hashes to Crack – The Oil Company Edition, grecs, NoVA Infosec
- Yahoo's password hack shows that it failed security 101, David Goldman, CNN
- Hackers crack more than 60% of breached LinkedIn passwords, Jaikumar Vijayan, Computerworld
- LinkedIn admits site hack, adds pinch of salt to passwords, Brid-Aine Parnell, The Register
Yahoo! Breach Updates
- All 3 Billion Yahoo Accounts Were Affected by 2013 Attack, Nicole Perlroth, The New York Times
- Yahoo just said every single account was affected by 2013 attack — 3 billion in all, Todd Haselton, CNBC
- Yahoo Triples Estimate of Breached Accounts to 3 Billion, Robert McMillan and Ryan Knutson, The Wall Street Journal
- Yahoo says all 3 billion user accounts were impacted by 2013 security breach, Natt Garun, The Verge
- Every single Yahoo account was hacked - 3 billion in all, Selena Larson, CNN Tech
Operating Systems
- Understanding /etc/passwd File Format, Vivek Gite, nixCraft
- Understanding /etc/shadow file, Vivek Gite, nixCraft
- Passwords Technical Overview, Microsoft TechNet
Other
- hashes.org/, an organization that attempts to reveal plain text of submitted hashes to evaluate security and help users recover forgotten passwords