Bypassing Windows Hello for Business and Pleasure
summary
Demonstrates research into bypassing Windows Hello for Business, focusing on attacks that undermine its passwordless PIN and biometric authentication methods. Covers practical techniques an attacker can use to defeat Windows Hello on Windows systems and shows weaknesses in the platform’s promised security guarantees.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:22Why Passwordless
- 8:49How we did it
- 10:41Descriptor
- 14:50Sample Project
- 18:46Capture Data
- 21:17Pie Chart
- 22:36Demo
- 26:26Review
- 27:08Next steps
- 29:31Summary
- 29:51Mitigation
- 33:20Questions
related talks
13mExploring User Authentication with Windows Hello in a Small Business Environment
40mThe Attacker’s Guide to SSO and Passwordless Technologies
26mBypassing Local Windows Authentication To Defeat Full Disk Encryption
18mThe Latest in Windows Security for Developers
46mBlueMaster: Bypassing and Fixing Bluetooth-based Proximity Authentication
49mGoing Passwordless for Employees: Secure Modern Authentication at Work
27mPasskeys on Windows: Paving the Way to a Frictionless Future!
40mExploiting Windows Hello for Business