I've submitted my talk for BSides Las Vegas #PasswordsCon, have you? Throw your hat in the ring, it's a grand time! Offer expires at midnight PDT https://bsideslv.org/cfp #InfoSec #BSides

I'm happy to welcome Hazel Murray back to #PasswordsCon, this time to talk about quantum multi-factor authentication.

Her last time at PasswordsCon was in Stockholm in 2018, where she talked about modelling the costs versus benefits of password advice policies, which can be found here: https://youtu.be/0kZpOSpl8EE

Please visit this page to read the abstract for her upcoming talk:
https://passwordscon.org/passwordscon-2023-bergen/

Happy to announce the return of @Sinobell as a speaker at #PasswordsCon in Bergen, May 15-16 & 18!

Once again she will talk about choosing the right password manager. A highly useful topic for many of us, I'm sure!

Read more and reach out here:
https://passwordscon.org/passwordscon-2023-bergen/

#PasswordsCon in Bergen, May 15-16 (& 18), is happening!

CFP is extended, new deadline is Sunday, March 12: https://passwordscon.org/cfp/

Adding more confirmed speakers & talks here:
https://passwordscon.org/passwordscon-2023-bergen/

Registration to open in <=2 weeks I hope.

Please RT & submit talks!

Announcing Tamas Bisztray, PhD candidate at University in Oslo Norway, as a speaker for #PasswordsCon, May 15-16 in Bergen, Norway.

Talk title: "Privacy-Preserving Password Cracking: How a Third Party can Crack our Password Hash Without Learning the Hash Value or the Cleartext".

For full abstract please visit https://passwordscon.org/passwordscon-2023-bergen/

Conference CFP:
https://passwordscon.org/cfp/

@thorsheim Looking forward to speak at #PasswordsCon in Bergen, Norway (May 15-16)!

Talk: Evaluating Risk-Based Authentication (RBA) on a Large-Scale Online Service

We will show how RBA behaves on an online service with millions of users, and how you can configure it with high usability, security, and privacy (yes, that's possible).

https://passwordscon.org/passwordscon-2023-bergen/

#InfoSec #CyberSecurity #Authentication #HCI #UX #PasswordUX #Password #Usability #Privacy #SingleSignOn

Super excited to announce @swiefling as a speaker for #PasswordsCon in Bergen, Norway, on May 15-16.

Stephan has spoken for us before, & will follow up on his work on risk-based authentication!

Infopage here:
https://passwordscon.org/passwordscon-2023-bergen/

CFP:
https://passwordscon.org/cfp/

CFP for #PasswordsCon in Bergen, Norway, on May 15-16 & 18 is now online: https://passwordscon.org/cfp/

Please RT!

Ok, #PasswordsCon in Bergen, Norway, on May 15-16, and limited audience no recording/streaming event on May 18 for people in gov/forensics/specialists. Bonus: experience our celebration of our constitution day (national day) on May 17.

CFP as usual: submit to me by email. Participation will be free, or very cheap. Absolutely non-profit for me.

Looking for sponsors who would like to buy coffee, lunch, snacks, breakfast, dinner, pizza, drinks...

More official info at passwordscon.org soon.

Ok, #PasswordsCon in Bergen, Norway, on May 15-16, and limited audience no recording/streaming event on May 18 for people in gov/forensics/specialists. Bonus: experience our celebration of our constitution day (national day) on May 17.

CFP as usual: submit to me by email. Participation will be free, or very cheap. Absolutely non-profit for me.

Looking for sponsors who would like to buy coffee, lunch, snacks, breakfast, dinner, pizza, drinks...

More official info at passwordscon.org soon.

That feeling when a friend tells me that #FedEx allows setting long passwords on their website, but their app silently truncates them and and throws a stupid "something is wrong!" error at you.

And the neat little thing their password reset allows for enumeration of existing accounts, as they show an error if account (email) doesn't exist.

Not really what I would call "best practice".
#PasswordsCon

So I had lunch with @Sinobell today, and we discussed May 15-18 for #PasswordsCon here in Bergen, Norway.

2 day conference 15-16, experience our national day May 17th, then "invite only, no stream, recordings or pictures" PasswordsCon on May 18.

What do you think?
(Please boost!)

@passwordscon Will #PasswordsCon happen in the EU or in the US next year?

#PasswordsCon update: planning for orgs izing the conference end of May /early June. Considering 3 days, 2 for con, 1 day for invited people only, no streaming or recording.

Trying to decide on when to do #PasswordsCon in Europe again. Very easy for me to do it in my home town Bergen. But exactly when?

Trying to decide on when to do #PasswordsCon in Europe again. Very easy for me to do it in my home town Bergen. But exactly when?

Astuce : mettre moins de quatre caractères au mot de passe root :
---
RT @FrancoisTango@twitter.activitypub.actor
Je viens de voir une entreprise survivre à une tentative d'intrusion informatique vis brute force ce weekend. La tentative avait commencé avec un password à 4 lettres. Le password du serveur en question est "a" 😭😭😭
#IT #Password #passwordscon #hacks
https://twitter.com/FrancoisTango/status/1199303511500083206

RT @FrancoisTango@twitter.com

Je viens de voir une entreprise survivre à une tentative d'intrusion informatique vis brute force ce weekend. La tentative avait commencé avec un password à 4 lettres. Le password du serveur en question est "a" 😭😭😭
#IT #Password #passwordscon #hacks

🐦🔗: https://twitter.com/FrancoisTango/status/1199303511500083206