SlideShare a Scribd company logo
1 of 83
Download to read offline
@SeraAndroid#DeathToPW
Death to Passwords
Tim Messerschmidt
Head of Developer Advocacy, International
PayPal / Braintree
SXSW 2015
@SeraAndroid#DeathToPW
Death to Passwords
Tim Messerschmidt
Head of Developer Advocacy, International
PayPal / Braintree
SXSW 2015
@SeraAndroid#DeathToPW
>Death to
Passwords_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
The 1000 most
used passwords
of 2012
wiki.skullsecurity.org/Passwords
@SeraAndroid#DeathToPW
4.7% use
password
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
8.5% use
password or
123456
@SeraAndroid#DeathToPW
9.8% use password,
123456 or 12345678
@SeraAndroid#DeathToPW
Top 10
14%
@SeraAndroid#DeathToPW
Top 100
40%
@SeraAndroid#DeathToPW
Top 500
79%
@SeraAndroid#DeathToPW
Top 1000
91%
@SeraAndroid#DeathToPW
2013cbsn.ws/1siTPGH
@SeraAndroid#DeathToPW
1.โ€ฏ 123456
2.โ€ฏ password
3.โ€ฏ 12345678
4.โ€ฏ qwerty
5.โ€ฏ abc123
6.โ€ฏ 123456789
7.โ€ฏ 111111
8.โ€ฏ 1234567
9.โ€ฏ iloveyou
10.โ€ฏadobe123
11.โ€ฏ123123
12.โ€ฏadmin
13.โ€ฏ1234567890
14.โ€ฏletmein
15.โ€ฏphotoshop
16.โ€ฏ1234
17.โ€ฏmonkey
18.โ€ฏshadow
19.โ€ฏsunshine
20.โ€ฏ12345
@SeraAndroid#DeathToPW
1.โ€ฏ 123456
2.โ€ฏ password
3.โ€ฏ 12345678
4.โ€ฏ qwerty
5.โ€ฏ abc123
6.โ€ฏ 123456789
7.โ€ฏ 111111
8.โ€ฏ 1234567
9.โ€ฏ iloveyou
10.โ€ฏadobe123
11.โ€ฏ123123
12.โ€ฏadmin
13.โ€ฏ1234567890
14.โ€ฏletmein
15.โ€ฏphotoshop
16.โ€ฏ1234
17.โ€ฏmonkey
18.โ€ฏshadow
19.โ€ฏsunshine
20.โ€ฏ12345
@SeraAndroid#DeathToPW
2014bit.ly/1xYHjdp
@SeraAndroid#DeathToPW
1.โ€ฏ 123456
2.โ€ฏ password
3.โ€ฏ 12345
4.โ€ฏ 12345678
5.โ€ฏ qwerty
6.โ€ฏ 1234567890
7.โ€ฏ 1234
8.โ€ฏ baseball
9.โ€ฏ dragon
10.โ€ฏfootball
11.โ€ฏ1234567
12.โ€ฏmonkey
13.โ€ฏletmein
14.โ€ฏabc123
15.โ€ฏ111111
16.โ€ฏmustang
17.โ€ฏaccess
18.โ€ฏshadow
19.โ€ฏmaster
20.โ€ฏmichael
@SeraAndroid#DeathToPW
1.โ€ฏ 123456
2.โ€ฏ password
3.โ€ฏ 12345 up 17
4.โ€ฏ 12345678 down 1
5.โ€ฏ qwerty down 1
6.โ€ฏ 1234567890
7.โ€ฏ 1234 up 9
8.โ€ฏ baseball new
9.โ€ฏ dragon new
10.โ€ฏfootball new
11.โ€ฏ1234567 down 4
12.โ€ฏmonkey up 5
13.โ€ฏletmein up 1
14.โ€ฏabc123 down 9
15.โ€ฏ111111 down 8
16.โ€ฏmustang new
17.โ€ฏaccess new
18.โ€ฏshadow
19.โ€ฏmaster new
20.โ€ฏmichael new
@SeraAndroid#DeathToPW
>Honorary mention_
@SeraAndroid#DeathToPW
>Honorary mention
21. superman
24. batman
_
@SeraAndroid#DeathToPW
_
@SeraAndroid#DeathToPW
>The 3 key problems_
@SeraAndroid#DeathToPWabstrusegoose.com/296
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Favor security too much over the
experience and youโ€™ll make the
website a pain to use.
smashingmagazine.com/2012/10/26/password-masking-hurt-signup-form
@SeraAndroid#DeathToPW
vs.
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
People forget passwordsโ€ฆ
45% admit to leaving a website instead of re-
setting their password or answering security
questions
- Blue Inc. 2011
@SeraAndroid#DeathToPW
Letโ€™s admit it:
Passwords really suck!
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Hashing
hash(password + salt)
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Bad hashing
algorithms
MD5, SHA-1, SHA-2, SHA-3
bit.ly/1DOfzy7
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Awesome hashing
algorithms
PBKDF2, BCRYPT, SCRYPT
bit.ly/1DOfzy7
@SeraAndroid#DeathToPW
2 Factor Authentication
twofactorauth.org
@SeraAndroid#DeathToPW
Passwordless Authentication
medium.com/@ninjudd/passwords-are-obsolete-9ed56d483eb
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
braintreepayments.com/blog/goodbye-passwords-one-touch-hello-bitcoin
> Braintree Says Goodbye to Passwords
With One Touch Payments for PayPal and
Venmo, and Hello to Bitcoin_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
People hate to register
Out of 657 surveyed users 66% think that
social sign-in is a desirable alternative.
- Blue Inc. 2011
@SeraAndroid#DeathToPW
Person
Social
Identity
Concrete
Identity
No
Identity
@SeraAndroid#DeathToPW
Authorization & Authentication
stackoverflow.com/questions/6367865/is-there-a-difference-
between-authentication-and-authorization
@SeraAndroid#DeathToPW
One person's data is another
person's noise.
- K.C. Cole
@SeraAndroid#DeathToPW
>Social vs. Concrete Identities_
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 1.0
2007
@SeraAndroid#DeathToPW
Request
Request Token
Grant
Request Token
Direct User
to Service
Obtain
Authorization
Direct to
Consumer
Request
Access Token
Grant
Access Token
Access
Resources
The
Consumer
Service
Provider
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 1.0a
2009
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 2.0
2012
@SeraAndroid#DeathToPW
Direct User
to Service
Obtain
Authorization
Request
Access Token
Grant
Access Token
Direct to
Consumer
Access
Resources
The
Consumer
Service
Provider
@SeraAndroid / @Braintree_Dev
@SeraAndroid#DeathToPW
OAuth 2.0 Token via Header
URL url = new URL("http://url.com/");
HttpURLConnection urlConnection =
(HttpURLConnection) url.openConnection();
setRequestProperty("Authorization", "Bearer โ€ฆ");
@SeraAndroid#DeathToPW
OAuth 2.0 Token via URI
"url.com/oauth?access_token=โ€ฆ"
@SeraAndroid#DeathToPW
OAuth libraries
oauth.net/code
@SeraAndroid#DeathToPW
OAuth libraries for Android
github.com/mttkay/signpost
github.com/pakerfeldt/signpost-retrofit
@SeraAndroid#DeathToPW
OAuth libraries for iOS
github.com/nxtbgthng/OAuth2Client
github.com/AFNetworking/AFOAuth2Manager
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OpenID
2005
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
The Hybrids
OpenID OAuth Extension
& OpenID Connect
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Upcoming
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
A Trusted
Environment
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
>The Realm of Creepy_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Scaling
Security
@SeraAndroid#DeathToPW
FIDO Alliancefidoalliance.org
@SeraAndroid#DeathToPW
Security
Needs an accessible standard
@SeraAndroid#DeathToPW
Difference
Between Authentication and Authorization
@SeraAndroid#DeathToPW
User Experience
Should be enhanced - not impaired
@SeraAndroid#DeathToPW
Thanks
tim@getbraintree.com
braintreepayments.com/developers
slideshare.com/PayPal

More Related Content

Viewers also liked

True Life: I work at an advertising agency
True Life: I work at an advertising agencyTrue Life: I work at an advertising agency
True Life: I work at an advertising agency
Kait1788
ย 
Lunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TYLunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TY
vinhbinh2010
ย 
How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?
CFGSSufiaB
ย 

Viewers also liked (9)

IT Performance โ€“ what differentiates the Leaders
IT Performance โ€“ what differentiates the LeadersIT Performance โ€“ what differentiates the Leaders
IT Performance โ€“ what differentiates the Leaders
ย 
Grรกfico diario del ibex 35 para el 15 04 2015
Grรกfico diario del ibex 35 para el 15 04 2015Grรกfico diario del ibex 35 para el 15 04 2015
Grรกfico diario del ibex 35 para el 15 04 2015
ย 
True Life: I work at an advertising agency
True Life: I work at an advertising agencyTrue Life: I work at an advertising agency
True Life: I work at an advertising agency
ย 
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
ย 
Q3 15 earnings slides-final
Q3 15 earnings slides-finalQ3 15 earnings slides-final
Q3 15 earnings slides-final
ย 
Salesforce dug meetup6_summer14apex
Salesforce dug meetup6_summer14apexSalesforce dug meetup6_summer14apex
Salesforce dug meetup6_summer14apex
ย 
Lunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TYLunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TY
ย 
RFID
RFIDRFID
RFID
ย 
How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?
ย 

Similar to Death to Passwords SXSW 15

Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014
Paris Android User Group
ย 

Similar to Death to Passwords SXSW 15 (11)

Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014
ย 
#MBLTdev: ะกะพะฒั€ะตะผะตะฝะฝะฐั ะฐัƒั‚ะตะฝั‚ะธั„ะธะบะฐั†ะธั (PayPal)
#MBLTdev: ะกะพะฒั€ะตะผะตะฝะฝะฐั ะฐัƒั‚ะตะฝั‚ะธั„ะธะบะฐั†ะธั (PayPal)#MBLTdev: ะกะพะฒั€ะตะผะตะฝะฝะฐั ะฐัƒั‚ะตะฝั‚ะธั„ะธะบะฐั†ะธั (PayPal)
#MBLTdev: ะกะพะฒั€ะตะผะตะฝะฝะฐั ะฐัƒั‚ะตะฝั‚ะธั„ะธะบะฐั†ะธั (PayPal)
ย 
Cryptography for Beginners - Sunshine PHP 2018
Cryptography for Beginners - Sunshine PHP 2018Cryptography for Beginners - Sunshine PHP 2018
Cryptography for Beginners - Sunshine PHP 2018
ย 
Cryptography for Beginners - Midwest PHP 2018
Cryptography for Beginners - Midwest PHP 2018Cryptography for Beginners - Midwest PHP 2018
Cryptography for Beginners - Midwest PHP 2018
ย 
Online passwords โ€“ understanding "credential stuffing" cyberattack
Online passwords โ€“ understanding "credential stuffing" cyberattackOnline passwords โ€“ understanding "credential stuffing" cyberattack
Online passwords โ€“ understanding "credential stuffing" cyberattack
ย 
Understanding & Facilitating Semantic Search - #SearchFest 2016
Understanding & Facilitating Semantic Search - #SearchFest 2016Understanding & Facilitating Semantic Search - #SearchFest 2016
Understanding & Facilitating Semantic Search - #SearchFest 2016
ย 
CoinMiners are Evasive - BsidesTLV
CoinMiners are Evasive - BsidesTLVCoinMiners are Evasive - BsidesTLV
CoinMiners are Evasive - BsidesTLV
ย 
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User TrustBrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
ย 
Racing crypto exchanges, or how I manipulated the balances
Racing crypto exchanges, or how I manipulated the balancesRacing crypto exchanges, or how I manipulated the balances
Racing crypto exchanges, or how I manipulated the balances
ย 
TCS: Competitive Intelligence Tools - Tools Presentation Part 1
TCS: Competitive Intelligence Tools - Tools Presentation Part 1TCS: Competitive Intelligence Tools - Tools Presentation Part 1
TCS: Competitive Intelligence Tools - Tools Presentation Part 1
ย 
An Introduction to PASETO Tokens
An Introduction to PASETO TokensAn Introduction to PASETO Tokens
An Introduction to PASETO Tokens
ย 

More from Tim Messerschmidt

SETapp Prรคsentation
SETapp PrรคsentationSETapp Prรคsentation
SETapp Prรคsentation
Tim Messerschmidt
ย 

More from Tim Messerschmidt (12)

JSConf Asia: Node.js Authentication and Data Security
JSConf Asia: Node.js Authentication and Data SecurityJSConf Asia: Node.js Authentication and Data Security
JSConf Asia: Node.js Authentication and Data Security
ย 
DWS Mobile Payments Workshop
DWS Mobile Payments WorkshopDWS Mobile Payments Workshop
DWS Mobile Payments Workshop
ย 
Building a Mobile Location Aware System with Beacons
Building a Mobile Location Aware System with BeaconsBuilding a Mobile Location Aware System with Beacons
Building a Mobile Location Aware System with Beacons
ย 
Node.js Authentication and Data Security
Node.js Authentication and Data SecurityNode.js Authentication and Data Security
Node.js Authentication and Data Security
ย 
Node.js Authentication & Data Security
Node.js Authentication & Data SecurityNode.js Authentication & Data Security
Node.js Authentication & Data Security
ย 
HackconEU: Hackathons are for Hackers
HackconEU: Hackathons are for HackersHackconEU: Hackathons are for Hackers
HackconEU: Hackathons are for Hackers
ย 
The Anatomy of Invisible Apps
The Anatomy of Invisible AppsThe Anatomy of Invisible Apps
The Anatomy of Invisible Apps
ย 
Expanding APIs beyond the Web
Expanding APIs beyond the WebExpanding APIs beyond the Web
Expanding APIs beyond the Web
ย 
Future Of Payments
Future Of PaymentsFuture Of Payments
Future Of Payments
ย 
Death To Passwords
Death To PasswordsDeath To Passwords
Death To Passwords
ย 
Kraken at DevCon TLV
Kraken at DevCon TLVKraken at DevCon TLV
Kraken at DevCon TLV
ย 
SETapp Prรคsentation
SETapp PrรคsentationSETapp Prรคsentation
SETapp Prรคsentation
ย 

Recently uploaded

Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
SUHANI PANDEY
ย 
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
SUHANI PANDEY
ย 
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort ServiceCall Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
9953056974 Low Rate Call Girls In Saket, Delhi NCR
ย 
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
nilamkumrai
ย 
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
singhpriety023
ย 
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRLLucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
imonikaupta
ย 
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
ย 
Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
Russian Call Girls Pune  (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...Russian Call Girls Pune  (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
SUHANI PANDEY
ย 
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
nilamkumrai
ย 
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
ย 

Recently uploaded (20)

Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
ย 
Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
Yerawada ] Independent Escorts in Pune - Book 8005736733 Call Girls Available...
ย 
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
ย 
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
ย 
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort ServiceCall Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
Call Girls in Prashant Vihar, Delhi ๐Ÿ’ฏ Call Us ๐Ÿ”9953056974 ๐Ÿ” Escort Service
ย 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
ย 
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
( Pune ) VIP Pimpri Chinchwad Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | G...
ย 
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
ย 
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRLLucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
Lucknow โคCALL GIRL 88759*99948 โคCALL GIRLS IN Lucknow ESCORT SERVICEโคCALL GIRL
ย 
Call Now โ˜Ž 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.
Call Now โ˜Ž 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.Call Now โ˜Ž 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.
Call Now โ˜Ž 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.
ย 
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
ย 
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
ย 
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls DubaiDubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
ย 
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableCall Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
ย 
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
ย 
Busty DesiโšกCall Girls in Vasundhara Ghaziabad >เผ’8448380779 Escort Service
Busty DesiโšกCall Girls in Vasundhara Ghaziabad >เผ’8448380779 Escort ServiceBusty DesiโšกCall Girls in Vasundhara Ghaziabad >เผ’8448380779 Escort Service
Busty DesiโšกCall Girls in Vasundhara Ghaziabad >เผ’8448380779 Escort Service
ย 
Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
Russian Call Girls Pune  (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...Russian Call Girls Pune  (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
Russian Call Girls Pune (Adult Only) 8005736733 Escort Service 24x7 Cash Pay...
ย 
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
ย 
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls ๐ŸŽ—๏ธ 9352988975 Sizzling | Escorts | Girls Are Re...
ย 
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
ย 

Death to Passwords SXSW 15

Editor's Notes

  1. Have a look at the key issues of passwords Ways to improve working with passwords Alternative technologies that boost UX
  2. Security is a concept Constant struggle to keep up with exploits No 100% security
  3. And it doesnโ€™t even stop here
  4. SplashData
  5. SplashData
  6. Batman vs superman movie DC must have paid for this
  7. Batman vs superman movie DC must have paid for this
  8. Batman vs superman movie DC must have paid for this
  9. Mention 3 key problems: Reused Phished Keylogged
  10. April 7th 2014 public Read the memory of system Compromises secret keys OpenSSL
  11. Jakob Nielsen Denmark
  12. Roberto Orgiu
  13. MD5, SHA-1, 2, 3
  14. MD5, SHA-1, 2, 3
  15. bcrypt scrypt and PBKDF2 Password based key derivation function scrypt 2012 IETF
  16. OTP (One-time password) Not vulnerable to replay attacks Supposed to be used on one system only
  17. OTP (One-time password) Not vulnerable to replay attacks Affects one system only Twitter & Yahoo
  18. Sci-Fi Author The Universe and the Teacup
  19. 3 kinds of token Request Authorization Access
  20. Vulnerability Redirect URI
  21. Open a WebView Request Access Token with Auth Code
  22. More than 1 billion users at peak 2009
  23. OpenID OAuth 2 Hybrid Extension OpenID Connect
  24. Should biometry replace passwords or identity?
  25. Heartbeat
  26. Fujitsu
  27. Emotiv Electrical activity in brain