EVE Online: Defending our players from hackers
summary
History of reactive measures and concrete outcomes: an initial character challenge reduces takeovers but fails against reused usernames and social engineering; a custom OAuth SSO centralizes throttling and revocation; verified email plus emailed 2FA codes replace the challenge, harden email-change flow and stop mass account theft after free-to-play rollout; Have I Been Pwned k‑anonymity checks drop insecure-password logins by about 40% and prevent ~10,000 compromises in one month; partnership with OnePassword and UX tweaks raise 2FA usage to roughly 9–10% of logins.
AI-written summary · about
chapters (7)
- 0:00Start
- 6:41Thrown into the deep end
- 7:31Credential-stuffing attacks
- 10:14Character challenge circumvention 101
- 20:21Solutions
- 30:122018 - Built-in browser security features
- 36:05Summary - Key learnings
related talks
51mEVE Online: Defending our players from hackers and the evolution of account security
42mChallenges in User Authentication: Balancing Security & User Experience
31mLog In Through the Front Door: Automating Defense Against...
26mIntegrating Identity and Fraud
31mAdvanced Persistent Teenagers: Understanding the Lapsus$ Playbook
45mApplying Past Lessons for Intel-Driven Identity Threat Detection
20mSession: AI vs. Your Game: The New Era Of Social Media Attacks
15mThe evolution of user logins