Passwords13

Tuesday, July 30

• Welcome to Passwords13

• Advanced Password Cracking: Hashcat Techniques for the Last 20%

• Smarter Password Cracking with PACK

• Markov Chains & Other Statistical Password Attacks

• Defining Password Strength

• Gavel: Password Justice

• Optimizing the Computation of Hash Algorithms as an Attacker

• A Review of Real World Security Questions & Answers

• Using HSMs to Secure Password Databases

• Stronger Identity Protection via Mobile Devices

• How To Screw Up Password Hashing: Secrets of a Password Cracker Author

• Hash, store, ..., profit!

• The Password Hashing Competition: Motivation, Challenges, and Organization

Wednesday, July 31

• Thorsheim - TBD

• Cracking Corporate Passwords: Why Your Password Policy Sucks

• Common Password Cracking Misconceptions

• Crunching the Top 10,000 Websites' Password Policies and Controls

• Playing Defence with PBKDF2

• Bypassing Strong Authentication... With Passwords?!

• Utilizing Paste Services for Fun and Hashes

• Password Cracking, From "abc123" to "thereisnofatebutwhatwemake"