Requiem for the Password
summary
Password use stays dominant and remains the top cause of breaches, with 613 million compromised passwords in Troy Hunt’s Have I Been Pwned list cited as proof. Historical failures include exposed password files and the Hawaii emergency post‑it password; Yahoo’s massive breach is named as an irony. Recommended practices are NIST SP 800-63B and the UK NCSC advice to prefer three random words, allow long passphrases, block known-bad passwords, and adopt MFA via tools like Duo or Microsoft Authenticator and biometrics.
AI-written summary · about
chapters (28)
- 0:00Intro
- 0:55Background
- 2:31Disclaimer
- 2:56Origins
- 3:26History
- 7:09Weaknesses
- 7:37Password Arms Race
- 9:09The Good News
- 9:57The Dark Web
- 10:10Engineers Band
- 11:08The Other
- 11:35The Hawaii Incident
- 12:17The Password BSides
- 18:00NIST Password Tips
- 19:17NIST Password Requirements
- 24:24What to do when good passwords go bad
- 25:48Current NIST requirements
- 26:15Not all passwords are bad
- 27:25Check lists
- 27:52Password Audit Compliance Tools
- 29:35Bill Gates
- 30:16Yahoo
- 31:03Google
- 34:29Biometrics
- 36:28No Passwords
- 37:03Are Pins More Secure
- 38:23Future of Passwords
- 39:16Questions
related talks
23mFantastic Passwords and Where to Find Them
40mFantastic Passwords and Where to Find Them
30mhunter2: A Symphony of Password Horror
47mLessons From Billions of Breached Records
25mEverything You Know About Passwords Is Wrong
46mKeynote: Lessons From 11 Billion Breached Records
21mEverything but the User: Reducing Password Reuse
31mBreaking Bad (Passwords)