Lilly Ryan

3 videos · 3 events · 2017–2019 · 1h 39m of video

Talks

0:31:06

hunter2: A Symphony of Password Horror

DjangoCon US 2017 · September 6, 2017

Passwords have always been undermined by predictable choices, reused credentials, plaintext storage, restrictive policies, and the assumption that a password is enough to authenticate someone. Developers can reduce the damage by using salted, slow password hashing, HTTPS, multi-factor authentication—preferably hardware-backed U2F rather than SMS—multiple recovery…

Spoken at