Security Strategies in Linux Platforms and Applications, 3rd Edition

Making Sure Users Stay Within Secure Limits

Passwords have long been problematic, likely going back to the first system where they were introduced in the 1960s. Today, it is common for attackers to use techniques like password spraying where they make use of known usernames and passwords to attack systems because it’s common for people to reuse passwords and usernames from one login to another, whether that’s a system or a web application. Beyond the problem of reuse, too many applications and systems have stored passwords in cleartext, making it trivial for attackers to maintain large stores of known passwords. Finally, attackers can get hashed password dumps and use tools like the password crackers we have looked at in previous chapters to ...