SlideShare a Scribd company logo
1 of 83
Download to read offline
@SeraAndroid#DeathToPW
Death to Passwords
Tim Messerschmidt
Head of Developer Advocacy, International
PayPal / Braintree
SXSW 2015
@SeraAndroid#DeathToPW
Death to Passwords
Tim Messerschmidt
Head of Developer Advocacy, International
PayPal / Braintree
SXSW 2015
@SeraAndroid#DeathToPW
>Death to
Passwords_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
The 1000 most
used passwords
of 2012
wiki.skullsecurity.org/Passwords
@SeraAndroid#DeathToPW
4.7% use
password
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
8.5% use
password or
123456
@SeraAndroid#DeathToPW
9.8% use password,
123456 or 12345678
@SeraAndroid#DeathToPW
Top 10
14%
@SeraAndroid#DeathToPW
Top 100
40%
@SeraAndroid#DeathToPW
Top 500
79%
@SeraAndroid#DeathToPW
Top 1000
91%
@SeraAndroid#DeathToPW
2013cbsn.ws/1siTPGH
@SeraAndroid#DeathToPW
1.  123456
2.  password
3.  12345678
4.  qwerty
5.  abc123
6.  123456789
7.  111111
8.  1234567
9.  iloveyou
10. adobe123
11. 123123
12. admin
13. 1234567890
14. letmein
15. photoshop
16. 1234
17. monkey
18. shadow
19. sunshine
20. 12345
@SeraAndroid#DeathToPW
1.  123456
2.  password
3.  12345678
4.  qwerty
5.  abc123
6.  123456789
7.  111111
8.  1234567
9.  iloveyou
10. adobe123
11. 123123
12. admin
13. 1234567890
14. letmein
15. photoshop
16. 1234
17. monkey
18. shadow
19. sunshine
20. 12345
@SeraAndroid#DeathToPW
2014bit.ly/1xYHjdp
@SeraAndroid#DeathToPW
1.  123456
2.  password
3.  12345
4.  12345678
5.  qwerty
6.  1234567890
7.  1234
8.  baseball
9.  dragon
10. football
11. 1234567
12. monkey
13. letmein
14. abc123
15. 111111
16. mustang
17. access
18. shadow
19. master
20. michael
@SeraAndroid#DeathToPW
1.  123456
2.  password
3.  12345 up 17
4.  12345678 down 1
5.  qwerty down 1
6.  1234567890
7.  1234 up 9
8.  baseball new
9.  dragon new
10. football new
11. 1234567 down 4
12. monkey up 5
13. letmein up 1
14. abc123 down 9
15. 111111 down 8
16. mustang new
17. access new
18. shadow
19. master new
20. michael new
@SeraAndroid#DeathToPW
>Honorary mention_
@SeraAndroid#DeathToPW
>Honorary mention
21. superman
24. batman
_
@SeraAndroid#DeathToPW
_
@SeraAndroid#DeathToPW
>The 3 key problems_
@SeraAndroid#DeathToPWabstrusegoose.com/296
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Favor security too much over the
experience and you’ll make the
website a pain to use.
smashingmagazine.com/2012/10/26/password-masking-hurt-signup-form
@SeraAndroid#DeathToPW
vs.
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
People forget passwords…
45% admit to leaving a website instead of re-
setting their password or answering security
questions
- Blue Inc. 2011
@SeraAndroid#DeathToPW
Let’s admit it:
Passwords really suck!
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Hashing
hash(password + salt)
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Bad hashing
algorithms
MD5, SHA-1, SHA-2, SHA-3
bit.ly/1DOfzy7
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
Awesome hashing
algorithms
PBKDF2, BCRYPT, SCRYPT
bit.ly/1DOfzy7
@SeraAndroid#DeathToPW
2 Factor Authentication
twofactorauth.org
@SeraAndroid#DeathToPW
Passwordless Authentication
medium.com/@ninjudd/passwords-are-obsolete-9ed56d483eb
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
braintreepayments.com/blog/goodbye-passwords-one-touch-hello-bitcoin
> Braintree Says Goodbye to Passwords
With One Touch Payments for PayPal and
Venmo, and Hello to Bitcoin_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
Merchant app
PayPal app
Merchant app
@SeraAndroid#DeathToPW
People hate to register
Out of 657 surveyed users 66% think that
social sign-in is a desirable alternative.
- Blue Inc. 2011
@SeraAndroid#DeathToPW
Person
Social
Identity
Concrete
Identity
No
Identity
@SeraAndroid#DeathToPW
Authorization & Authentication
stackoverflow.com/questions/6367865/is-there-a-difference-
between-authentication-and-authorization
@SeraAndroid#DeathToPW
One person's data is another
person's noise.
- K.C. Cole
@SeraAndroid#DeathToPW
>Social vs. Concrete Identities_
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 1.0
2007
@SeraAndroid#DeathToPW
Request
Request Token
Grant
Request Token
Direct User
to Service
Obtain
Authorization
Direct to
Consumer
Request
Access Token
Grant
Access Token
Access
Resources
The
Consumer
Service
Provider
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 1.0a
2009
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OAuth 2.0
2012
@SeraAndroid#DeathToPW
Direct User
to Service
Obtain
Authorization
Request
Access Token
Grant
Access Token
Direct to
Consumer
Access
Resources
The
Consumer
Service
Provider
@SeraAndroid / @Braintree_Dev
@SeraAndroid#DeathToPW
OAuth 2.0 Token via Header
URL url = new URL("http://url.com/");
HttpURLConnection urlConnection =
(HttpURLConnection) url.openConnection();
setRequestProperty("Authorization", "Bearer …");
@SeraAndroid#DeathToPW
OAuth 2.0 Token via URI
"url.com/oauth?access_token=…"
@SeraAndroid#DeathToPW
OAuth libraries
oauth.net/code
@SeraAndroid#DeathToPW
OAuth libraries for Android
github.com/mttkay/signpost
github.com/pakerfeldt/signpost-retrofit
@SeraAndroid#DeathToPW
OAuth libraries for iOS
github.com/nxtbgthng/OAuth2Client
github.com/AFNetworking/AFOAuth2Manager
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
OpenID
2005
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
/$d+/
@SeraAndroid#DeathToPW
The Hybrids
OpenID OAuth Extension
& OpenID Connect
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Upcoming
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
A Trusted
Environment
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
>The Realm of Creepy_
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
@SeraAndroid#DeathToPW
Scaling
Security
@SeraAndroid#DeathToPW
FIDO Alliancefidoalliance.org
@SeraAndroid#DeathToPW
Security
Needs an accessible standard
@SeraAndroid#DeathToPW
Difference
Between Authentication and Authorization
@SeraAndroid#DeathToPW
User Experience
Should be enhanced - not impaired
@SeraAndroid#DeathToPW
Thanks
tim@getbraintree.com
braintreepayments.com/developers
slideshare.com/PayPal

More Related Content

Viewers also liked

True Life: I work at an advertising agency
True Life: I work at an advertising agencyTrue Life: I work at an advertising agency
True Life: I work at an advertising agency
Kait1788
 
Lunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TYLunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TY
vinhbinh2010
 
How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?
CFGSSufiaB
 

Viewers also liked (9)

IT Performance – what differentiates the Leaders
IT Performance – what differentiates the LeadersIT Performance – what differentiates the Leaders
IT Performance – what differentiates the Leaders
 
Gráfico diario del ibex 35 para el 15 04 2015
Gráfico diario del ibex 35 para el 15 04 2015Gráfico diario del ibex 35 para el 15 04 2015
Gráfico diario del ibex 35 para el 15 04 2015
 
True Life: I work at an advertising agency
True Life: I work at an advertising agencyTrue Life: I work at an advertising agency
True Life: I work at an advertising agency
 
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
10 Strategies Startup Companies Need to Know to Aggressively Build a Patent P...
 
Q3 15 earnings slides-final
Q3 15 earnings slides-finalQ3 15 earnings slides-final
Q3 15 earnings slides-final
 
Salesforce dug meetup6_summer14apex
Salesforce dug meetup6_summer14apexSalesforce dug meetup6_summer14apex
Salesforce dug meetup6_summer14apex
 
Lunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TYLunar new year celebrations TET QUY TY
Lunar new year celebrations TET QUY TY
 
RFID
RFIDRFID
RFID
 
How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?How effective is the combination of your main product and ancillary?
How effective is the combination of your main product and ancillary?
 

Similar to Death to Passwords SXSW 15

Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014
Paris Android User Group
 

Similar to Death to Passwords SXSW 15 (11)

Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014Death to passwords - DroidCon Paris 2014
Death to passwords - DroidCon Paris 2014
 
#MBLTdev: Современная аутентификация (PayPal)
#MBLTdev: Современная аутентификация (PayPal)#MBLTdev: Современная аутентификация (PayPal)
#MBLTdev: Современная аутентификация (PayPal)
 
Cryptography for Beginners - Sunshine PHP 2018
Cryptography for Beginners - Sunshine PHP 2018Cryptography for Beginners - Sunshine PHP 2018
Cryptography for Beginners - Sunshine PHP 2018
 
Cryptography for Beginners - Midwest PHP 2018
Cryptography for Beginners - Midwest PHP 2018Cryptography for Beginners - Midwest PHP 2018
Cryptography for Beginners - Midwest PHP 2018
 
Online passwords – understanding "credential stuffing" cyberattack
Online passwords – understanding "credential stuffing" cyberattackOnline passwords – understanding "credential stuffing" cyberattack
Online passwords – understanding "credential stuffing" cyberattack
 
Understanding & Facilitating Semantic Search - #SearchFest 2016
Understanding & Facilitating Semantic Search - #SearchFest 2016Understanding & Facilitating Semantic Search - #SearchFest 2016
Understanding & Facilitating Semantic Search - #SearchFest 2016
 
CoinMiners are Evasive - BsidesTLV
CoinMiners are Evasive - BsidesTLVCoinMiners are Evasive - BsidesTLV
CoinMiners are Evasive - BsidesTLV
 
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User TrustBrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
BrightonSEO July 2021: Spilling the T in EAT- Easy CRO Tricks for User Trust
 
Racing crypto exchanges, or how I manipulated the balances
Racing crypto exchanges, or how I manipulated the balancesRacing crypto exchanges, or how I manipulated the balances
Racing crypto exchanges, or how I manipulated the balances
 
TCS: Competitive Intelligence Tools - Tools Presentation Part 1
TCS: Competitive Intelligence Tools - Tools Presentation Part 1TCS: Competitive Intelligence Tools - Tools Presentation Part 1
TCS: Competitive Intelligence Tools - Tools Presentation Part 1
 
An Introduction to PASETO Tokens
An Introduction to PASETO TokensAn Introduction to PASETO Tokens
An Introduction to PASETO Tokens
 

More from Tim Messerschmidt

More from Tim Messerschmidt (12)

JSConf Asia: Node.js Authentication and Data Security
JSConf Asia: Node.js Authentication and Data SecurityJSConf Asia: Node.js Authentication and Data Security
JSConf Asia: Node.js Authentication and Data Security
 
DWS Mobile Payments Workshop
DWS Mobile Payments WorkshopDWS Mobile Payments Workshop
DWS Mobile Payments Workshop
 
Building a Mobile Location Aware System with Beacons
Building a Mobile Location Aware System with BeaconsBuilding a Mobile Location Aware System with Beacons
Building a Mobile Location Aware System with Beacons
 
Node.js Authentication and Data Security
Node.js Authentication and Data SecurityNode.js Authentication and Data Security
Node.js Authentication and Data Security
 
Node.js Authentication & Data Security
Node.js Authentication & Data SecurityNode.js Authentication & Data Security
Node.js Authentication & Data Security
 
HackconEU: Hackathons are for Hackers
HackconEU: Hackathons are for HackersHackconEU: Hackathons are for Hackers
HackconEU: Hackathons are for Hackers
 
The Anatomy of Invisible Apps
The Anatomy of Invisible AppsThe Anatomy of Invisible Apps
The Anatomy of Invisible Apps
 
Expanding APIs beyond the Web
Expanding APIs beyond the WebExpanding APIs beyond the Web
Expanding APIs beyond the Web
 
Future Of Payments
Future Of PaymentsFuture Of Payments
Future Of Payments
 
Death To Passwords
Death To PasswordsDeath To Passwords
Death To Passwords
 
Kraken at DevCon TLV
Kraken at DevCon TLVKraken at DevCon TLV
Kraken at DevCon TLV
 
SETapp Präsentation
SETapp PräsentationSETapp Präsentation
SETapp Präsentation
 

Recently uploaded

VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
dharasingh5698
 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
 
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
nilamkumrai
 
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 

Recently uploaded (20)

VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
 
Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
Top Rated  Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...Top Rated  Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
 
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
 
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
 
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
 
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
 
Russian Call Girls in %(+971524965298 )# Call Girls in Dubai
Russian Call Girls in %(+971524965298  )#  Call Girls in DubaiRussian Call Girls in %(+971524965298  )#  Call Girls in Dubai
Russian Call Girls in %(+971524965298 )# Call Girls in Dubai
 
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
 
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
 
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
 
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
( Pune ) VIP Baner Call Girls 🎗️ 9352988975 Sizzling | Escorts | Girls Are Re...
 
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
 
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
Wagholi & High Class Call Girls Pune Neha 8005736733 | 100% Gennuine High Cla...
 
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
 
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
 
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
 
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
 

Death to Passwords SXSW 15

Editor's Notes

  1. Have a look at the key issues of passwords Ways to improve working with passwords Alternative technologies that boost UX
  2. Security is a concept Constant struggle to keep up with exploits No 100% security
  3. And it doesn’t even stop here
  4. SplashData
  5. SplashData
  6. Batman vs superman movie DC must have paid for this
  7. Batman vs superman movie DC must have paid for this
  8. Batman vs superman movie DC must have paid for this
  9. Mention 3 key problems: Reused Phished Keylogged
  10. April 7th 2014 public Read the memory of system Compromises secret keys OpenSSL
  11. Jakob Nielsen Denmark
  12. Roberto Orgiu
  13. MD5, SHA-1, 2, 3
  14. MD5, SHA-1, 2, 3
  15. bcrypt scrypt and PBKDF2 Password based key derivation function scrypt 2012 IETF
  16. OTP (One-time password) Not vulnerable to replay attacks Supposed to be used on one system only
  17. OTP (One-time password) Not vulnerable to replay attacks Affects one system only Twitter & Yahoo
  18. Sci-Fi Author The Universe and the Teacup
  19. 3 kinds of token Request Authorization Access
  20. Vulnerability Redirect URI
  21. Open a WebView Request Access Token with Auth Code
  22. More than 1 billion users at peak 2009
  23. OpenID OAuth 2 Hybrid Extension OpenID Connect
  24. Should biometry replace passwords or identity?
  25. Heartbeat
  26. Fujitsu
  27. Emotiv Electrical activity in brain