Category: Security

6 digit OTP for Two Factor Auth (2FA) is brute-forceable in 3 days

Posted in:

— May 11, 2019 11:50

OTP/TOTP for two factor auth (2FA/MFA) is very easy to misunderstand and implement insecurely

A simple password-less, email-only login system

Posted in:

— July 17, 2016 16:52

A simple password-less login system to consider for some use cases, with Django code.

Why escape-on-input is a bad idea

Posted in:

— August 6, 2012 20:59

With examples from the web development world especially PHP, and lessons for Pythonistas

Updated validator and CsrfMiddleware

Posted in:

— December 14, 2005 23:45

I've released some small updates to my 'Django validator app' and 'CsrfMiddleware'...