Articles Tagged “Authentication”
4 articles tagged “Authentication”, newest first.
-
Registered Information Security Specialist Exam, Spring 2024 (Reiwa 6) Afternoon Q1 — JWT alg=none, API Authorization, and Interim WAF Mitigation
This article explains Afternoon Q1 of Japan's Spring 2024 RISS exam: JWT alg=none, API authorization, Mass Assignment, 4-digit code brute force, and interim ...
-
Why Passkeys Are Secure — How They Work, How They Sync, and What to Watch for If You Lose a Device
Why passkeys are secure, from registration to login: phishing resistance, synced vs. device-bound, revocation and recovery after a loss, plus WebAuthn and Wi...
-
NTLM and Kerberos Explained with Diagrams — Why Authentication Falls Back to NTLM
Diagrams compare NTLM and Kerberos: challenge/response, TGTs and service tickets, Negotiate's NTLM fallback without an SPN, relay attacks, Pass-the-Hash, and...
-
Integrating Entra ID Authentication into WinForms/WPF Apps — A Practical Architecture with MSAL.NET and the WAM Broker
A practical, hands-on look at integrating Entra ID (formerly Azure AD) authentication into WinForms/WPF desktop apps: the public client mindset, where ROPC s...