Your Passwords Are in Danger - Why You Need a Password Manager Now
Explore password security, learn about password managers, and discover how to protect your online accounts from potential breaches and hacking attempts.
Three Profiles of OAuth2 for Identity and Access Management - 2016
Explore OAuth2 profiles for identity and access management, covering OpenID Connect, UMA, and Google's approach. Learn strategies for implementing OAuth2 in enterprise security infrastructure.
Building an Auth Experience for Humans - Best Practices and User-Friendly Design
Discover best practices for designing secure and user-friendly authentication experiences. Learn industry tips, pitfalls to avoid, and insights into human psychology to create top-notch app security.
Authentication UX Best Practices - From Onboarding to Account Recovery
Explore best practices for seamless user authentication, from onboarding to account recovery. Learn to balance security and usability, optimize 2FA, and enhance customer satisfaction.
Stealth Authentication: Preventing Information Leaks in Web Application Security - APPSEC CA 2017
Explore stealth authentication techniques to enhance web application security by preventing information leaks during the authentication process.
Securing the npm Ecosystem - Enhancing Trust in Open Source
Learn about GitHub's efforts to secure the npm ecosystem, including 2FA, Sigstore, and other measures to protect open source dependencies and prevent account takeovers.
Two-Factor Auth - Demand Bidirectional
Explore two-factor authentication vulnerabilities, attack types, and innovative solutions for enhanced security. Learn about proposed improvements and future directions in authentication systems.
Ransombile, Yet Another Reason to Ditch SMS
Explore the vulnerabilities of SMS and learn about Ransombile, a new threat to mobile security. Discover why ditching SMS is crucial for protecting your personal information.
Drag Us to Wonder Bad - A Tale of How to Be Good People by Capturing Credentials and 2FA
Explore social engineering techniques for capturing credentials and 2FA from popular email clients, presented through an Alice in Wonderland-inspired narrative by a cybersecurity expert.
What We Can Learn from Google's Fight with Phishing
Insights from Google's research on phishing attacks, including prevalence, impact, and effective mitigation strategies. Explores prevention methods and provides customized recommendations for different user environments.
2FA in 2020 and Beyond
Explore the modern 2FA landscape with data-driven analysis, comparing security strength and user experience of various authentication methods like SMS, soft tokens, push, and WebAuthn.
Deploying Two-Factor Authentication to Millions of Users
Comprehensive guide on implementing two-factor authentication for large-scale websites, covering design, architecture, and various methods like TOTP, push notifications, and FIDO security keys.
Sex, Secret and God - A Brief History of Bad Passwords
Explore the evolution of password security, common pitfalls, and best practices for creating strong, memorable passwords in this informative cybersecurity talk.
The Commoditization of Security Solutions - Will You Be Replaced by a Small Script?
Explore the impact of security solution commoditization on the industry and professionals. Learn strategies to stay relevant in an evolving landscape.
A Hacker's Guide to Using the YubiKey - How to Add Inexpensive 2-Factor Authentication to Your Next Project
Explore YubiKey's versatile 2-factor authentication capabilities, from setup to advanced security features. Learn implementation techniques for various projects and understand potential vulnerabilities.
Why Are We Still Doing Authentication Wrong?
Explore common authentication pitfalls, costs, and phases. Learn about 2FA misconceptions, password security, and new guidelines for robust authentication practices in the digital age.
Ichthyology - Phishing as a Science
Explore the psychology of phishing, analyze real-world attacks, and learn evidence-based prevention techniques. Discover how to protect against credential theft and evaluate the effectiveness of phishing training.
Integrating Mobile Devices into Your Penetration Testing Program - DefCamp 2015
Explore integrating mobile devices into penetration testing programs, covering security risks, attack vectors, and defensive strategies for corporate and personal devices.
The State of the Stalkerware - Eva Galperin - USENIX Enigma Conference - 2020
Eva Galperin discusses recent efforts to combat stalkerware, a covert surveillance tool often used in domestic abuse. She highlights initiatives by security companies, tech giants, and support organizations to protect victims.
Designing Flexibility in Software to Increase Security
Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.
The Sounds of the Phones - Dangers of Zero-Effort Second Factor Login Based on Ambient Audio
Explores security vulnerabilities in ambient audio-based two-factor authentication, demonstrating potential attacks and discussing mitigation strategies for improved cybersecurity.