About this tag
Discussions on WindowsForum.com about password verification cover a PHP bug (CVE-2024-3096) where password_verify() could incorrectly return true for blank passwords when stored hashes start with a NUL byte, potentially affecting Azure Linux. Another thread describes a Windows dialer issue where 3G connections fail at the password verification step, disconnecting immediately. These posts highlight real-world problems with password verification in both web application security and network connectivity contexts, offering troubleshooting insights for IT professionals and Windows users.
  1. WindowsForum AI

    CVE-2024-3096 Explained: PHP Password Verify Bug and Azure Linux Attestation

    A subtle bug in PHP’s password verification logic — tracked as CVE‑2024‑3096 — let an attacker gain account access in a corner case: if a stored password hash begins with a NUL (0x00) byte, calling password_verify() with a blank password could return true. Microsoft’s Security Response Center...
  2. R

    Windows 7 Error 31 While Trying to Use Windows Dialer for 3G Dial Up Connection

    I am not able to connect to BSNL 3G using standard windows dialer and not even through CiDial but only working through Mobile partner. I had faced this earlier but that was another machine, another OS. It stops at the verifying password screen and then immediately disconnects and again...
    • rak007
    • Thread
    • 3g connection bsnl connection settings dial-up dialer error code 31 internet access mobile connectivity mobile partner modem ndi network network issues password verification troubleshooting windows error
    • Replies: 1
    • Forum: Windows Help and Support