[vox] [fwd] Sex, Secret and God: A Brief History of Bad Passwords (Kyle Rankin)

Bill Kendrick nbs at sonic.net
Fri May 12 00:27:06 PDT 2017


FYI!  (I haven't watched it myself, yet.)

Perhaps new LUGOD leadership should invite Kyle out
to LUGOD to speak again!  (He came back in 2005 & 2006)

-bill!

----- Forwarded message from Allan Cecil <allan at nblug.org> -----

Date: Wed, 10 May 2017 09:22:37 -0700
From: Allan Cecil <allan at nblug.org>
Subject: Re: [NBLUG/talk] [NBLUG/Announce] TONIGHT - Sex,
 Secret and God: A Brief History of Bad Passwords (Kyle Rankin)
To: "General NBLUG chatter about anything Linux, answers to questions, etc."
 <talk at nblug.org>
Reply-To: allan at nblug.org,
        "General NBLUG chatter about anything Linux,
 answers to questions, etc." <talk at nblug.org>

I'm glad you were able to watch!

For anyone else who wants to watch the recording you can catch the first part at https://www.twitch.tv/videos/141446665 and (after a strange camera freeze issue and a restart) the second half at https://www.twitch.tv/videos/141454216 including some amusing raffle rambling at the end.  For an added bit of amusement you can watch with the chat history on and see us struggling with trying to figure out why we couldn't update the title of the stream until I finally realized that having the word "Sex" in the title was triggering a filter.  I blame Kyle for that. :)

Enjoy,

A.C.
******
President, North Bay Linux Users' Group

On 05/10/2017 08:27 AM, Susan Baur wrote:
> Thanks so much for streaming this. I was bummed that I wasn't able to join the meeting, but being able to watch it this morning instead was great.
> 
> Kyle did an excellent job, as usual.
> 
> --Susan
>  
>> On May 9, 2017, at 7:37 PM, Allan Cecil <allan at nblug.org> wrote:
>>
>> There are a few people who cannot make it tonight so I've started a live stream on my channel at http://twitch.tv/dwangoAC if you want to join remotely.  Enjoy,
>>
>> A.C.
>> ******
>> President, North Bay Linux Users' Group
>>
>> On 05/09/2017 12:07 PM, Allan Cecil wrote:
>>> This is a much needed topic if the discussion in the talk list is any indication.  Come one come all tonight at 7:30,
>>>
>>> A.C.
>>> ******
>>> President, North Bay Linux Users' Group
>>>
>>> On 04/18/2017 03:05 PM, Allan Cecil wrote:
>>>> Topic: Sex, Secret and God: A Brief History of Bad Passwords
>>>> When: Tuesday May 9th, 7:30 PM to 9:00 PM
>>>> Speaker: Kyle Rankin
>>>>
>>>> Location: O'Reilly Media, Sebastopol CA in the Tarsier conference room
>>>> past the metal statue and to the right ( http://nblug.org/locations )
>>>>
>>>> Description:
>>>> Most of what we've been told over the years about what makes a good
>>>> password has been wrong, so it's no surprise most people pick bad
>>>> passwords. This talk will cover the history of password policy and password
>>>> cracking starting from the days when Richard Stallman hacked the passwords
>>>> forced on his MIT computer lab because he considered passwords an
>>>> authoritarian method of control. Next I'll discuss the golden days of
>>>> password guessing featured prominently in movies like Hackers and WarGames.
>>>>
>>>> Then I'll move to the tech boom and the introduction of draconian IT
>>>> policies like password rotation and password complexity and the dirty
>>>> little leet-speak password secrets they led to. As we get closer to the
>>>> modern day I'll discuss the "correct horse battery staple" password
>>>> renaissance and more modern approaches to password cracking spawned by
>>>> tools like oclhashcat and giant password databases dumps like the RockYou
>>>> hack.
>>>>
>>>> I'll finish up with modern attempts to fix the password auth problem such
>>>> as new approaches to secure password generation in password managers or
>>>> schemes such as diceware as well as cover password auth reinforcements like
>>>> the different forms of 2FA (including U2F) and Facebook's new approach to
>>>> "I forgot my password" workflows. By the end everyone should have plenty of
>>>> ammunition to take back to their IT department and get rid of those
>>>> horrible password policies.
>>>> _______________________________________________
>>>> announce mailing list
>>>> announce at nblug.org
>>>> http://nblug.org/cgi-bin/mailman/listinfo/announce
>>>>
>>> _______________________________________________
>>> announce mailing list
>>> announce at nblug.org
>>> http://nblug.org/cgi-bin/mailman/listinfo/announce
>>>
>> _______________________________________________
>> announce mailing list
>> announce at nblug.org
>> http://nblug.org/cgi-bin/mailman/listinfo/announce
> 
> _______________________________________________
> talk mailing list
> talk at nblug.org
> http://nblug.org/cgi-bin/mailman/listinfo/talk
> 
_______________________________________________
talk mailing list
talk at nblug.org
http://nblug.org/cgi-bin/mailman/listinfo/talk

----- End forwarded message -----

-- 
-bill!
Sent from my computer


More information about the vox mailing list