Главная
Study mode:
on
1
Introduction
2
Why are passwords so bad
3
History of passwords
4
Golden age of passwords
5
Domain knowledge
6
Minimum password link
7
Password complexity rules
8
Password math
9
Leadspeak
10
Password Rotation
11
Problems with Password Rotation
12
Xkcd Password Renaissance
13
Long Pass Phrases
14
Complex Passwords
15
Password Cracking
16
RockYou Hack
17
Advanced Cracking
18
Whats a Good Password
19
TwoFactor Authentication
20
SMS
21
TLTP U2F
22
Password Reset Attacks
23
Conclusion
24
Questions
25
Biometrics
26
Magic Links
27
CAPTCHAs
28
TFA
29
SMS is dead
30
Password managers
31
The clipboard vulnerability
Description:
Explore the evolution and vulnerabilities of password security in this 54-minute BSidesLV conference talk by Kyle Rankin. Delve into the history of passwords, examining their golden age and the subsequent challenges that arose. Analyze common password practices, including complexity rules, minimum length requirements, and password rotation policies. Investigate the impact of major password breaches, such as the RockYou hack, and learn about advanced cracking techniques. Discover what constitutes a strong password and explore alternative authentication methods like two-factor authentication, biometrics, and magic links. Gain insights into the limitations of SMS-based authentication and the potential risks associated with password managers. Conclude with a discussion on emerging trends in cybersecurity and participate in a Q&A session addressing topics such as CAPTCHAs and clipboard vulnerabilities.

Sex, Secret and God - A Brief History of Bad Passwords

BSidesLV
Add to list