Briefings·40 min
Sid Rao · Gabriela Sonkeri · Amel Bourdoucen · Janne Lindqvist
Considereds permutations and combinations of scenarios where account recovery can be triggered by a user and how these websites allow the claiming entity (user or an adversary) to gain control over the account.
security-researchauthenticationauditing+2