PasswordsCon·22 min
Dimitri Fousekis
Shows cracked-password data from real organizations that undercuts forced password rotation and suggests risk-based alternatives.
password-policyidentityrisk+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 342 talks in the archive.
1–2 of 2 talks
PasswordsCon·22 min
Dimitri Fousekis
Shows cracked-password data from real organizations that undercuts forced password rotation and suggests risk-based alternatives.
PasswordsCon·43 min
Dimitri Fousekis · Ethan Crane
Shows how transliteration, keyboard layout mismatches and emoji substitution create wordlists for cracking non-English passwords.