--- title: Dynamic Benchmarking Blog description: Dynamic Benchmarking Association Blog --- [![Stacked Logo color icon](https://blog.associationbenchmarking.com/hs-fs/hubfs/Stacked%20Logo%20color%20icon.png?width=277&height=81&name=Stacked%20Logo%20color%20icon.png)](http://www.dynamicbenchmarking.com)   # Stacked Up ## [So what is the answer for those who can't afford or want an alternative to HSM's?](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms) November 27, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms#comments-listing) BlindHash Cyber Protection is similar to an HSM in some ways -- both are an additive layer of security to protect crucial secrets, even if an attacker is able to access the database. But the BlindHash approach is quite different. Instead of playing the same game of trying to hide a tiny secret key from an attacker, we protect secrets with our patented data pool model. With BlindHash, an attacker would have to physically steal the entire data pool off our servers. Just based on the physics of the size of the pool versus the speed of the network, this process becomes easy to detect and easy to defend against. [Read More](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms) [![](https://blog.associationbenchmarking.com/hubfs/black%20box%20hsm.png)](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) ## [An Alternative to HSMs?](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) November 27, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms#comments-listing) For years, large sized banks and corporations have been using [Hardware Security Modules](https://www.cryptomathic.com/news-events/blog/understanding-hardware-security-modules-hsms) (HSMs) to help perform their secure cryptographic operations. HSMs are certified by NIST under FIPS 140-2, which is a set of standards and requirements governing the design of the hardware and software components of the HSM. FIPS 140-2 can provide some assurance that the overall system, including hardware tamper resistance, cryptographic primitives, and even user management and configuration, are designed to resist intrusion. HSMs provide a system to generate and store secret keys, and perform cryptographic operations using those keys inside a protected enclave. In short, an HSM holds secret keys inside a closed-source “black box” which *in theory* an attacker cannot access. [Read More](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) [![](https://blog.associationbenchmarking.com/hubfs/the-private-club-advisor-logo.png)](https://blog.associationbenchmarking.com/news/private-club-advisor-october-2018) ## [Private Club Advisor - October 2018](https://blog.associationbenchmarking.com/news/private-club-advisor-october-2018) October 5, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [private clubs](https://blog.associationbenchmarking.com/news/topic/private-clubs) [0 Comments](https://blog.associationbenchmarking.com/news/private-club-advisor-october-2018#comments-listing) We were honored to be included in the October issue of The Private Club Advisor. You can review the summary of our interview with editor Jackie Carpenter, CCM below. To get a copy of the entire Private Club Advisor, [click here to subscribe.](https://www.privateclubadvisor.com/subscribe-128.html) ADDED PROTECTION… A security breach is a significant inconvenience to members, poses a serious threat to valuable club and member information, and can cause irreparable damage to the club’s reputation and credibility. Clubs are increasingly targeted by cyber criminals so an attack is likely for all clubs at some point. The affluent nature of club members means their passwords have a higher value and makes private clubs a very attractive target for hackers. If a security breach involves member password information, then members will be forced to reset their passwords. Once this happens, a good portion of members might just stop using the club website altogether. Perhaps there is a layer of protection clubs could incorporate to mitigate password breaches. According to Ray McDonald of BlindHash Cyber, the real problem is not that hackers have access to your club website. “Most clubs do not store any kind of financial information on the club website. But many club members use the same passwords repeatedly so if members used the same password for the club website and their bank account, hackers could potentially gain access to their banking information.” McDonald says hackers take stolen passwords along with any other personally identifiable information and use it to impersonate the user on other websites. When a person initially signs into a website, a password is entered and confirmed and the site authenticates the user. When the password is confirmed, the site “hashes” it by assigning a random string of numbers (the hash) and that is what is stored on the server. The vulnerability that all websites in the club industry have is that they store the hashes in the database. This means that all club websites have a vulnerability to the off line cyber attack. When a breach involving passwords happens the club has to assume that all passwords could be compromised and mandate all passwords be reset. BlindHash Cyber is a patented technology that takes part of the hash and entangles it in a very large offsite data pool, so the hash is effectively blinded. A key is then sent back to the club website to perform the authentication. This process makes the site immune to the off line attack vector. “They (the criminals) can’t solve the puzzle because they don’t have all of the pieces,” McDonald explained. Some website providers or platform vendors have this security as an upgrade option available to their clubs. Others may set up this security option for an affordable fee. See the resources box below for more information. [Read More](https://blog.associationbenchmarking.com/news/private-club-advisor-october-2018) [![](https://blog.associationbenchmarking.com/hubfs/Cino%20%26%20Blindhash%20logos.jpg)](https://blog.associationbenchmarking.com/news/blindhash-cyber-and-cino-security-annouce-strategic-partnership) ## [BLINDHASH CYBER AND CINO SECURITY ANNOUCE STRATEGIC PARTNERSHIP](https://blog.associationbenchmarking.com/news/blindhash-cyber-and-cino-security-annouce-strategic-partnership) May 31, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity), [private clubs](https://blog.associationbenchmarking.com/news/topic/private-clubs) [0 Comments](https://blog.associationbenchmarking.com/news/blindhash-cyber-and-cino-security-annouce-strategic-partnership#comments-listing) **FOR IMMEDIATE RELEASE** [Read More](https://blog.associationbenchmarking.com/news/blindhash-cyber-and-cino-security-annouce-strategic-partnership) [![](https://blog.associationbenchmarking.com/hubfs/gdpr-logo.png)](https://blog.associationbenchmarking.com/news/should-clubs-be-worried-about-gdpr) ## [Should Clubs Be Worried About GDPR?](https://blog.associationbenchmarking.com/news/should-clubs-be-worried-about-gdpr) May 18, 2018 / by [Ray McDonald](https://blog.associationbenchmarking.com/news/author/ray-mcdonald) posted in [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [private clubs](https://blog.associationbenchmarking.com/news/topic/private-clubs) [0 Comments](https://blog.associationbenchmarking.com/news/should-clubs-be-worried-about-gdpr#comments-listing) [Read More](https://blog.associationbenchmarking.com/news/should-clubs-be-worried-about-gdpr) [![](https://blog.associationbenchmarking.com/hubfs/blog_header_blacklist.jpg)](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) ## [Once Cracked Twice Shy - A Blacklist Too Far?](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) February 26, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) [0 Comments](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far#comments-listing) [Read More](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) [![](https://blog.associationbenchmarking.com/hubfs/stats_blog.jpg)](https://blog.associationbenchmarking.com/news/stats-that-will-open-your-eyes-to-the-potential-cyber-threats-against-your-club-in-2018) ## [Stats that will open your eyes to the potential cyber threats against your club in 2018.](https://blog.associationbenchmarking.com/news/stats-that-will-open-your-eyes-to-the-potential-cyber-threats-against-your-club-in-2018) February 20, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security) [0 Comments](https://blog.associationbenchmarking.com/news/stats-that-will-open-your-eyes-to-the-potential-cyber-threats-against-your-club-in-2018#comments-listing) [Read More](https://blog.associationbenchmarking.com/news/stats-that-will-open-your-eyes-to-the-potential-cyber-threats-against-your-club-in-2018) ## [Private Clubs that Have Teamed with BlindHash to Protect their Members' Passwords.](https://blog.associationbenchmarking.com/news/privat-clubs-that-have-teamed-with-blindhash-to-protect-their-members-passwords) February 9, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [password security](https://blog.associationbenchmarking.com/news/topic/password-security) [0 Comments](https://blog.associationbenchmarking.com/news/privat-clubs-that-have-teamed-with-blindhash-to-protect-their-members-passwords#comments-listing) ## RECENT LAUNCHES: No we don't mean Spacex! Although that was pretty cool! The follwing clubs have begun their cyber safe journey by teaming with BlindHash to protect their members' passwords online.  [Read More](https://blog.associationbenchmarking.com/news/privat-clubs-that-have-teamed-with-blindhash-to-protect-their-members-passwords) [![](https://blog.associationbenchmarking.com/hubfs/aspiration_press_release.jpg)](https://blog.associationbenchmarking.com/news/aspiration-hosting-and-blind-hash-partner) ## [ASPIRATION HOSTING AND  BLINDHASH PARTNER TO PROTECT ECOMMERCE SITES](https://blog.associationbenchmarking.com/news/aspiration-hosting-and-blind-hash-partner) January 24, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [magento](https://blog.associationbenchmarking.com/news/topic/magento), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/aspiration-hosting-and-blind-hash-partner#comments-listing) [Read More](https://blog.associationbenchmarking.com/news/aspiration-hosting-and-blind-hash-partner) [![](https://blog.associationbenchmarking.com/hubfs/ecommerce%20share%20of%20total%20global%20retail%20sales.png)](https://blog.associationbenchmarking.com/news/five-ecommerce-stats-that-will-drive-cybersecurity-attacks-in-2018) ## [Five eCommerce Stats that will Drive Cybersecurity Attacks in 2018](https://blog.associationbenchmarking.com/news/five-ecommerce-stats-that-will-drive-cybersecurity-attacks-in-2018) January 24, 2018 / by [Maria Holler](https://blog.associationbenchmarking.com/news/author/maria-holler) posted in [magento](https://blog.associationbenchmarking.com/news/topic/magento), [ecommerce](https://blog.associationbenchmarking.com/news/topic/ecommerce), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/five-ecommerce-stats-that-will-drive-cybersecurity-attacks-in-2018#comments-listing) As 2018 sets up to be a record year of growth for the eCommerce industry, it also sets itself up for another record; increased cyber attacks. Cyber criminals are naturally attracted to markets where they see opportunity and vulnerability and the eCommerce industry fits that profile. A[ccording to Richard Mellor](https://www.retaildive.com/news/how-technology-will-shape-the-future-of-retail-loss-prevention/427575/), former vice president of loss prevention for the National Retail Federation, “New ideas, concepts, and schemes are developed every day by cybercriminals, and their sophistication often includes virtual escape methods. Therefore, it will be even more important for loss prevention professionals, IT teams and cybersecurity specialists within a retail organization to find the right partners to protect their brand integrity.” Retailers will be faced with finding a balance between capitalizing on the opportunity of increased sales while also making investments that help ensure the protection of their online shoppers’ personal data and the their brand’s reputation. [Read More](https://blog.associationbenchmarking.com/news/five-ecommerce-stats-that-will-drive-cybersecurity-attacks-in-2018) [All posts](https://blog.associationbenchmarking.com/news/all) [Next](https://blog.associationbenchmarking.com/news/page/2) ### Subscribe to Email Updates - Recent - Popular - Categories ### Lists by Topic - [BlindHash Technology (14)](https://blog.associationbenchmarking.com/news/topic/blindhash-technology) - [password security (10)](https://blog.associationbenchmarking.com/news/topic/password-security) - [ecommerce cybersecurity (5)](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) - [magento (4)](https://blog.associationbenchmarking.com/news/topic/magento) - [ecommerce (3)](https://blog.associationbenchmarking.com/news/topic/ecommerce) - [private clubs (3)](https://blog.associationbenchmarking.com/news/topic/private-clubs) ### Posts by Topic - [BlindHash Technology (14)](https://blog.associationbenchmarking.com/news/topic/blindhash-technology) - [password security (10)](https://blog.associationbenchmarking.com/news/topic/password-security) - [ecommerce cybersecurity (5)](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) - [magento (4)](https://blog.associationbenchmarking.com/news/topic/magento) - [ecommerce (3)](https://blog.associationbenchmarking.com/news/topic/ecommerce) - [private clubs (3)](https://blog.associationbenchmarking.com/news/topic/private-clubs) see all ### Recent Posts #### About Us The #1 Benchmarking Technology for Associations of All Sizes. Anyone can create a survey, but only Dynamic Benchmarking can provide your association with the tools to create a study that will truly allow your members the ability to analyze where they stack up compared to their peers. With individualized on-demand reporting and web tools that put the power in your members hands, our technology enhances member engagement and saves your staff time. #### Contact Us [Dynamic Benchmarking info@dynamicbenchmarking.com](mailto:info@dyamicbenchmarking.com)| 603.686.7113