I wanted to share this article about websites/applications’ password reset process by Troy Hunt. It has a ton of information and examples of how to securely store passwords (with encryption and 1-way hashing), what username enumeration is, what a persistent password is, the purpose of CAPTCHAs, secret questions, etc. On […]
Tag: Security
Put Google’s Invisible reCAPTCHA on WordPress Login Without a Plugin

How to Integrate Google Invisible reCAPTCHA on WordPress Login If you’re looking to protect your WordPress site against brute force attacks, you can add features like a CAPTCHA or honeypot on your login page or enable 2-factor authentication. The code below is an example of how to add Google’s invisible […]
Security Team at KHM Travel Group

This summer, one of my main focuses at work has been on security. I formed a team in May with individuals from our Systems, Operations, and Fraud teams. Armed with each of our unique strengths, we’ve been tackling topics like password managers, phishing and ransomware, firewalls and network security, cybersecurity […]
Domain Privacy Protection

Every registered domain has contact information associated with it. This information is provided from the user (registrant) to the domain registrar (such as GoDaddy, 1&1, eNom, etc) at the domain’s registration. This information includes your name, address, and phone number and the registrar is required to prompt you annually to […]