BSidesSF 2015 - Your Users Passwords Are Already Stolen (Lucas Zaichkowsky)

Your Users Passwords Are Already Stolen
Lucas Zaichkowsky

Attackers have long exploited human weakness such as the lack of password complexity and vulnerability to phishing. As organizations improved defenses, attackers shifted to breaching websites to steal user databases. Their goal is to access your organization undetected. Common weaknesses in user database implementations will be explained and real world examples presented. To accent the problem, a well known database dump from 2014 containing passwords securely salted and hashed with multiple rounds …

access attackers bsidessf complexity databases defenses exploited human organization organizations password password complexity passwords phishing steal stolen undetected vulnerability weakness weaknesses websites