PasswordsCon·43 min
John-André Bjørkhaug
Shows how RFID access badges fail through default keys, cloning and replay attacks, drawn from physical penetration tests.
devicevulnerabilitiesattack+2
PasswordsCon BSidesLV 2024
Las Vegas, USA · August 2024 · 13 talks
PasswordsCon talks from BSides Las Vegas 2024.
1–12 of 12 talks / 13
PasswordsCon·39 min
Klaus Schmeh · Elonka Dunin
Explains how classical ciphers from centuries past are broken today using frequency analysis and hill climbing.
cryptanalysishistorychallenge+2
PasswordsCon·39 min
Filipi Pires
Walks through cloud identity misconfigurations and shows how graph-mode tooling maps privilege escalation paths.
cloudidentityattack+2
PasswordsCon·22 min
Explains how STIR/SHAKEN authenticates caller ID to help curb phone number spoofing.
networktrustidentity+1
PasswordsCon·24 min
Walks through hunting CVEs in Wi-Fi routers using open-source research and the risks of default configurations.
vulnerability-researchvulnerabilitiesnetwork+2
PasswordsCon·49 min
Troy Defty · Kathy Zhu
Explains detection patterns for stolen and forged credentials, covering impossible travel and credential binding violations.
threat-detectionidentitydetection+1
PasswordsCon·41 min
Jeff Deifik
Traces password hashing history and shows how a 1,576-password DES crypt dump was cracked with wordlists and rules.
attackidentitytool+2
PasswordsCon·35 min
Cecilie Wian
Explores how shared accounts and weak access controls in personal banking enable financial abuse, and what would fix them.
identityrisktrust+2
PasswordsCon·18 min
Rohit Bansal
Shows how small companies can drop VPN dependence using AWS Systems Manager and Verified Access under zero trust principles.
cloudidentityaws+2
PasswordsCon·27 min
Bård Aase
Shows how character encoding mistakes garble names, emails and passwords, and why UTF-8 mix-ups keep happening.
character-encodingunicodeweb+1
PasswordsCon·21 min
Aldo Salas
Explores how account recovery and identity verification must change once an organization removes passwords in favor of passkeys.
identityprivacytrust+1
PasswordsCon·42 min
Kenton McDonough
Shows how to rotate service credentials with no redeployments or downtime, using three patterns and lessons from a real system.
identityarchitecturelessons-learned+1