Hacking Identity - A Pen Tester's Guide to IAM
Learn pen testing techniques for Identity and Access Management systems, covering intelligence gathering, attack vectors, and security challenges in IAM implementations.
Passwords Are Not Going Away
Explore password security, authentication best practices, and user experience considerations in digital identity management. Insights from 23+ years of expertise in the field.
A Usability Study of Five Two-Factor Authentication Methods
Comprehensive usability study comparing five two-factor authentication methods, examining setup procedures, user experiences, and preferences to inform better security implementations for online accounts.
Breaking Apple's iCloud Keychain
Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.
Two-Factor Authentication, Usable or Not? - A Two-Phase Usability Study of the FIDO U2F Security Key
Explore the usability of FIDO U2F Security Keys for two-factor authentication through a comprehensive two-phase study, evaluating effectiveness and user experience.
Two Factor Failure
Explore vulnerabilities in Two-Factor Authentication systems, including a new attack on mobile TOTP. Learn best practices for secure 2FA deployment in enterprise and web applications.
Even The LastPass Will Be Stolen, Deal With It!
Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.
Bypassing 2Factor Auth with Android Trojans
Explore techniques for bypassing two-factor authentication using Android trojans, uncovering potential vulnerabilities in mobile security systems.
Hacking Corporate Email Systems
Learn techniques for hacking corporate email systems, including locating domains, gathering employee names, exploiting SMTP servers, and bypassing authentication. Explore methods to extract sensitive data and reuse credentials.
Open Source Identity Management in the Enterprise
Explore Red Hat's integration of open source solutions for seamless enterprise identity management, covering SAML, Kerberos, LDAP, and more. Learn about scaling for cloud environments and best practices.
Privacy & Security, Policy & Technology
Explore privacy and security in the digital age, covering policy issues, current technologies, and practical solutions for developers to protect user data without compromising usability.
Attacking Software Tokens
Exploring vulnerabilities in software OTP tokens, demonstrating reverse engineering techniques and exploits for major vendors' tokens, and assessing obfuscation effectiveness.
Enrolling Millions of Developers in 2FA - Here's What Happened
Behind-the-scenes look at GitHub's 2FA initiative: strategic considerations, challenges, and lessons learned from scaling security measures for millions of developers.
Can Cloud and Security Be Used in the Same Sentence
Explore cloud security concerns, best practices, and benefits in enterprise environments. Learn about encryption, two-factor authentication, and DevOps approaches for improved security and efficiency.
Auth for Encrypted Services with Server Side APT
Explore encrypted service authentication with server-side APT, covering key exchange, password management, two-factor auth, and hardware implementations like Teensy and Raspberry Pi.
Fail Now So I Don't Fail Later - A Look into Security Testing and Training Methodologies
Explore security testing and training methodologies to prevent data breaches. Learn about network infrastructure, prevention techniques, two-factor authentication, and effective detection strategies.
Phishing U2F Protected Accounts
Explore advanced phishing techniques targeting U2F-protected accounts and learn proactive defense strategies against sophisticated cyber threats.
Securing the Web with AI
Explore innovative AI-driven web security methods, including facial recognition for 2FA, user behavior analysis, and machine learning to detect fraudulent content, enhancing protection for all users.
A Reasonable Guide to Security Practices
Practical guide to enhancing personal cybersecurity, covering passwords, multi-factor authentication, VPNs, and network protection. Offers step-by-step advice from basic to advanced measures.
Web APIs for Delightful Two Factor Auth Experiences
Explore WebOTP API and autocomplete for improved two-factor authentication, enhancing security and user experience in web applications without compromising conversion rates.
Passwords Are So 1990
Explore modern authentication methods beyond passwords, enhancing security and user experience in digital systems.