Passwords are so 1990
summary
Passwords cause friction and breaches: examples include MyFitnessPal 150 million and Marriott 500 million records. The surface solution is one‑time codes via SMS, email or authenticator apps; the stronger solution is WebAuthn (W3C standard since March) using public/private key pairs and hardware or platform authenticators (USB keys, NFC, Touch ID, Android keystores). Browsers implement it (Chrome, Firefox; Safari/iOS lagging) and sites like Google and GitHub use it as a second factor, but problems remain: credential management, cross‑device sync and revocation.
AI-written summary · about
chapters (30)
- 0:00Intro
- 1:58SUMMARY A bit of history on passwords Types of passwords Passwordless authentication The Web authentication API
- 3:21FERNANDO CORBATÓ
- 3:54ROBERT MORRIS SR
- 4:53WHAT'S A PASSWORD?
- 7:14USUALLY USED ONLY WITH ACCESS TO A PHYSICAL THING (CARD, PHONE, KEYPAD, ...)
- 8:27SO WHAT'S THE PROBLEM WITH PASSWORDS?
- 9:34PASSWORDS CAN BE ANNOYING!
- 9:50USER DATA CAN GET STOLEN
- 10:13CAMBRIDGE ANALYTICA (FACEBOOK)
- 11:27TIPS FOR A GOOD PASSWORD Use a complex password Don't use personal data Don't reuse passwords Change passwords frequently
- 11:56ONE TIME PASSWORD
- 12:46YOU NEED YOUR CELLPHONE ON HAND
- 13:04YOU DON'T NEED A SECOND DEVICE
- 13:35OTHER AUTHENTICATOR APPS DUO Lastpass Authenticator Authy Microsoft Authenticator
- 14:02PUSH BASED
- 14:21SOCIAL
- 14:31ONE LESS PASSWORD TO REMEMBER
- 14:53YOU RELY ON ANOTHER SERVICE FOR AUTHENTICATION
- 15:18OFTEN USED AS A SECOND FACTOR
- 15:43KEY BASED AUTHENTICATION
- 16:29WHO HAS ONE?
- 17:16MOST MODERN DEVICES HAVE A BUILT IN AUTHENTICATOR DEVICE
- 18:31HOW DOS THIS WORK?
- 20:23LET'S LOOK AT SOME CODE
- 21:52USE THE CREATED CREDENTIALS
- 22:51USER CREDENTIAL MANAGEMENT
- 23:25CROSS DEVICES CREDENTIALS
- 23:47LOST/STOLEN AUTHENTICATOR DEVICE RECOVERY
- 24:04IT'S A W3C RECOMMENDATION!
