PasswordsCon·57 min
Tim Cappalli · Andrew Shikiar · Christiaan J Brand
Industry panelists discuss how FIDO standards and passkeys aim to replace passwords through better usability.
panelidentityweb+2
PasswordsCon BSidesLV 2022
Las Vegas, USA · August 2022 · 13 talks
PasswordsCon talks from BSides Las Vegas 2022.
Filters+
1–13 of 13 talks
PasswordsCon·29 min
Steve Thomas
Introduces a password hashing function designed to resist GPU cracking through cache-hard memory lookups.
password-hashingcryptographyopen-source+1
PasswordsCon·44 min
Jeffrey P Goldberg
Explores how a password manager could study user password habits while protecting individual data with privacy techniques.
privacytrustrisk+3
PasswordsCon·1 hr 57 min
Jim Fenton
Explains how activation secrets for multi-factor authenticators differ from passwords in threats, limits and design.
identitydevicetrust+1
PasswordsCon·1 hr 4 min
Per Thorsheim
Examines the ethics of cracking leaked passwords and a group threat model showing which attacks length and complexity actually stop.
identityriskthreat+2
PasswordsCon·43 min
Cecilie Wian
Explains why staff resist password managers and how empathy and gentle onboarding can win them over.
managementlearninglessons-learned+1
PasswordsCon·32 min
Christiaan J Brand
Traces how passkeys grew out of FIDO security keys into synced, phishing-resistant credentials meant to replace passwords.
identitywebtrust+2
PasswordsCon·25 min
Per Thorsheim
Shows how password survey questions get misread, and why people's answers about accounts and PINs fall short.
passwordprivacydiscussion+1
PasswordsCon·43 min
Mathew Woodyard
Shows how credential stuffing reaches login flows and which identity-layer controls, such as breach detection and bot defense, blunt it.
identityattackdetection+2
PasswordsCon·47 min
Susan Paskey
Shows how to threat hunt MFA logs for rogue devices, shared phones and suspicious login reports.
identitythreat-detectionincident-response+1
PasswordsCon·43 min
Dimitri Fousekis · Ethan Crane
Shows how transliteration, keyboard layout mismatches and emoji substitution create wordlists for cracking non-English passwords.
attackpracticaltool+1
PasswordsCon·52 min
Mia Landsem
Explains why children ignore standard password advice and how streaks, gaming and sharing habits shape their security choices.
privacyidentitysocial+1
PasswordsCon·31 min
Jeremy Brown
Works through the math of password length and hash cracking to argue that 15 random characters can be enough.
identityattackrisk+1