Everything We're Doing with Passwords is Wrong
summary
Explains that LinkedIn user passwords were compromised not by guessing but by theft of stored password data; discusses weaknesses in common password storage practices (including minimal use of salts) and argues that typical compliance rules would not have prevented such breaches. Mentions password hashing and storage as the core technical focus and critiques current password-handling approaches.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:10Compliance
- 2:13How Passwords Get Cracked
- 3:39Attacking Passwords
- 5:08Passwords in Systems
- 7:52How to Make It Harder
- 9:36What Makes It Harder
- 11:36Rainbow Tables
- 12:41Hashcat
- 17:22Password strength
- 18:18Long passwords
related talks
46mRequiem for the Password
43mHow to Defeat Brute Force and Leave Hackers with Nothing
23mFantastic Passwords and Where to Find Them
27mHow We Hacked LinkedIn & What Happened Next
47mYour Password Complexity Requirements are Worthless
25mEverything You Know About Passwords Is Wrong
30mhunter2: A Symphony of Password Horror
37mData Breaches: Barbarians in the Throne Room