Lost & Found: The Hidden Risks of Account Recovery in a Passwordless Future
Considereds permutations and combinations of scenarios where account recovery can be triggered by a user and how these websites allow the claiming entity (user or an adversary) to gain control over the account.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Black Hat·57 min
Self-Verifying Authentication
Engineers explore architecture and security mechanisms for Self-Verifying Authentication - A Framework For Safer Integrations of Single-Sign-On Services.
RSAC Cybersecurity·36 min
Analysts investigate attack surfaces and defenses concerning Detection of Authentication Events Involving Stolen Enterprise Credentials.
Briefings·33 min
Hayato Kimura · Ryoma Ito · Kazuhiko Minematsu · Shogo Shiraki · Takanori Isobe
Nostr is an emerging open-source, decentralized social networking protocol with over 1.1 million users—and a critical blind spot in its security design.