hunter2: A Symphony of Password Horror
summary
History shows passwords leak (MIT plaintext file, nuclear codes set to 00000000), so the talk pushes concrete fixes: use Django’s default PBKDF2 hashing or Argon2/BCrypt, add lockout with django-axes, enable multi-factor via U2F/YubiKey and TOTP (avoid SMS), surface password strength with zxcvbn, promote Diceware plus password managers, and reject single-factor biometrics after demos like Adobe Voco and research capturing fingerprints from meters away.
AI-written summary · about
chapters (5)
related talks
30mhunter2: A Symphony of Password Horror
27mAccount Security for the Fashionable App Developer
58mTaking the pain out of passwords and authentication
21mGoing Passwordless
23mFantastic Passwords and Where to Find Them
40mFantastic Passwords and Where to Find Them
46mRequiem for the Password
26mMaking Django Really, Really, Ridiculously Secure (CW)