Cybersecurity & Privacy
What is PBKDF2?
You have probably read about PBKDF2 if you have read any article discussing the LastPass hack or reviewing the security of a password manager. For non-technical readers, I wanted to write a quick explanation. PBKDF2 (Password-Based Key Derivation Function 2) is a widely used method of protecting passwords. A key derivation function such as PBKDF2 is designed to make it more difficult for an attacker to crack a password, even if they possess the hashed password value. This is accomplished by adding a "
What is salting and hashing a password?
The LastPass hacking saga has led to non-technical users reading articles using terms such as salting and hashing, which may seem alien to them. A few people contacted me asking what they do, and I wanted to write a short post describing them. Salting is the process of adding random data, referred to as "a salt," to a password before it is hashed. This technique helps protect against dictionary attacks, in which an attacker attempts to crack a hashed password using a pre-computed list of common passwords.
Unlocking the Secrets of ECB and CBC: A Guide to Encryption Methods
Cryptography methods such as Electronic Code Book (ECB) and Cipher Block Chaining (CBC) are widely used. ECB is a simple method of encrypting plaintext by dividing it into fixed-size blocks and encrypting each block independently using the same secret key. In other words, if the same plaintext block appears more than once in the message, it will be encrypted into the same ciphertext block (aka will look the same). The ECB encryption method is relatively easy to implement; however, it can be vulnerable to certain types of attacks, such as pattern recognition.
Keep Your Online Accounts Safe with 2-Factor Authentication: A Guide for Non-Tech Consumers
2-factor authentication (2FA) is a security measure that requires you to provide additional information to access your account. This extra step helps protect your account from unauthorized access, even if someone else knows your password. To use 2FA, you must set it up with a service or website that supports it. Then, when you log in to your account, you will be prompted to enter a code sent to your phone or email. Alternatively, a code is generated by an app or service you have previously linked to your account.
5 Tips to stay safe on social media
The use of social media is one of the most important tools we have for connecting with our friends and family. Unfortunately, it can also be a dangerous place if you are not careful. The following tips will help you stay safe when using social media. Ensure that you are aware of who you are connecting with - not everyone on social media is who they claim to be. Make sure to do your research and only connect with people you know and trust.
What is The Onion Router and is it secure
To provide its agents with a safe and secure means of communicating with each other without being tracked, the US Navy developed the TOR project. TOR stands for "The Onion Router." TOR sends your data via a network of nodes, or "onions," each of which encrypts your data before forwarding it to the next node. Consequently, it is challenging for anyone to trace your data back to you. The TOR project is now managed by the TOR Foundation, a not-for-profit organization.
What is the CCPA
The CCPA was created by the California State Legislature in response to a law requiring businesses to protect the personal information of Californians. The law was created as a result of the many data breaches that have occurred in recent years as well as the increasing use of consumer data by businesses. CCPA replaces previous laws governing consumer ådata protection in California and establishes new requirements for businesses. In accordance with the CCPA, businesses are required to disclose what personal information they collect, use, and sell, and consumers are entitled to know what personal information is being collected about them.
What is CASL
[caption id="" align=“alignnone” width=“3024”] Photo by Samuel Regan-Asante [/caption] The Canadian Anti-Spam Legislation (CASL) went into effect on July 1st, 2014. Designed to protect Canadians from unwanted commercial electronic messages (CEMs), it applies to all businesses that send CEMs - including emails, text messages, and social media messages. <a href="https://fightspam-combattrelepourriel.ised-isde.canada.ca/site/canada-anti-spam-legislation/en" target="_blank"><img src="https://ekiledjian2.micro.blog/uploads/2025/fd592eb689.jpg" alt=""></a> As a result of the law, CEMs cannot be sent unless the recipient has consented to receive them, and businesses that violate the law may be penalized. Additionally, businesses are required to include their contact information in all CEMs and to provide recipients with a means of unsubscribing from future messages.
What is vishing and how can you protect yourself?
A fraudulent practice known as Vishing involves the impersonation of a trustworthy entity in an electronic communication to gain sensitive information such as passwords, credit card details, or Social Security numbers. Vishing is a combination of "voice" and "phishing." Phishing is a type of cyber attack that uses fraudulent emails or websites to trick victims into divulging personal information. Most phishing attacks take place over the telephone and are often accompanied by a threat or sense of urgency to encourage victims to divulge their personal information.
Has your password leaked because of a site hack?
[caption id="" align=“alignnone” width=“3353”] Photo by Kevin Ku [/caption] The first line of defence against being hacked is your password. That is why it is essential to choose a strong password and not reuse it on more than one website. Despite your best efforts, you cannot guarantee that your passwords will not fall into the hands of hackers. You can check HaveIBeenPwned.com to determine whether your passwords have been compromised. Troy Hunt created this site to keep track of passwords exposed in data breaches.