Podcast episode #010 - Making Open-Source Software Usable with Ashley Fowler of USABLE.tools Ashley explains how the USABLE project makes open-source security and privacy software more usable by giving at-risk communities around the world a voice in the design and development process.
Podcast episode #009 - How to be an #MFAally with Tanya Janca of Microsoft Ever tweeted at a company? Did they reply? Tanya tweeted so consistently that she got a phone call...from her bank! Tanya and I break down passwords and multi-factor authentication, the bread and butter of security that many folks still don't get right.
Podcast episode Featured #008 - Secured by Math, Designed for People with Pilar García of 1Password Pilar García explains how @1Password is built around privacy by design, cryptography, usability, and openness. Also, learn how to make $100k for reading some bad poetry. The catch? Gotta break into a 1Password Vault first!
Podcast episode #007 - SOUPS 2019 - Part 2 A series of interviews with researchers from the Symposium on Usable Privacy and Security (SOUPS) on deleting your data from websites, updated expert advice, why your brain actually ignores notifications, usability of password managers, and 2FA on Fortnite.
Podcast episode #006 - SOUPS 2019 - Part 1 SOUPS is the conference to be at for usable security and privacy research. Listen to a series of interviews on everything from passwords and 2FA to abusing GDPR and unintended consequences of the auto-fill capability on iOS.
Podcast episode #005 - Grading How Companies (In)Securely Store Passwords with Michal Špaček of Password Storage Does your website store account passwords correctly? Would you tell everyone on the internet how you do it? Michal explains why you should and how to get an A+ grade from the Password Storage project.
Podcast episode #004 - Product Managers: The Polyglot Communication Hubs That Improve Your Products with Simon Moffatt of ForgeRock Your Engineering team is always on the same page as your Sales team, right? They never miscommunicate with Design, UX, or Customer Success either, right? Yea, I didn’t think so. Simon Moffatt explains what a Product Manager actually does and why the role is critical to building better software.
Podcast episode #003 - End-to-end Encrypted Chat Without Getting Snooped On with Max Krohn of Keybase Max shares the story of how he went from founding OkCupid to creating Keybase, a Slack-like app that allows average internet users to have end-to-end encrypted conversations and file sharing.
Podcast episode #002 - Your Phone is a Phishing Resistant Security Key with Alex Grinman of Kryptco Alex Grinman explains how Krypton, their open source browser extension and mobile app, can turn the phone sitting in your pocket into a phishing resistant two factor authentication (2FA) security key.
Podcast episode #001 - Open-source Hardware Security Keys with Conor Patrick of SoloKeys Conor Patrick, co-founder of SoloKeys, shares the story of raising $125,000 on Kickstarter to build Solo, an open-source hardware security key for two factor authentication (2FA).
2FA Featured Introducing 2FA Notifier - How to Get More Internet Users to Enable 2FA on Their Accounts Ray and I built an open source browser extension called 2FA Notifier that helps people enable 2FA on their accounts. Read about the extension and the problem it solves in my article that was initially published on the Okta Developer Blog.
2FA A medium dive on the Time-based One-time Passwords (TOTP) spec More technical than the All Things Auth overview article and less technical than the specification itself, here is a medium dive on how TOTP works under the hood!
2FA TOTP: (way) more secure than SMS, but more annoying than Push Ever wonder how Google Authenticator works? Learn why TOTP 2FA is drastically more secure than SMS 2FA and the security and usability tradeoffs it makes.
Zapier Zapier docs: plain-english, useful content, and helpful visual cues Often an after thought, docs are a critical part of the security UX. Zapier has paid particular attention to creating useful docs and it really shows!
Zapier Featured Zapier: Long emoji passwords and how to avoid credential stuffing attacks Zapier password policies allow users to create ridiculously strong passwords, but need some updates to reject weak and previously compromised passwords.
Zapier How Zapier rolled out 2FA support Two factor authentication (2FA) doesn't provide effective security if users don't enable it. Learn how Zapier announced the rollout of 2FA to its users!
Zapier The Big Idea for Zapier: Contextual 2FA Promotion March 2018 is Zapier month! Our Big Idea for Zapier is contextual 2FA promotion: an even better way to encourage users to enable two factor authentication!
Zapier Zapier: 2FA Deep Dive March 2018 is Zapier month! We dive deep into the security and user experience of Zapier's TOTP two factor authentication (2FA) implementation: what works and what could be improved?
Zapier Screencast Episode 1: Zapier March 2018 is Zapier month! Conor and Ray discuss passwords, hatch a plan to increase two factor authentication (2FA) adoption rates, and propose changes to the Zapier team plan.
2FA SMS: The most popular and least secure 2FA method SMS doesn’t actually prove “something you have”, so don’t rely on it for 2FA unless you absolutely must! Learn how SMS 2FA works to understand why.
2FA Featured Two Factor Authentication (2FA): What is it? How does it work? Why you should care! Learn why two factor authentication (2FA) is so important, how it actually protects your accounts, and how to assess the 2FA methods available on the services that you use!
Security features are features too! All aspects of the user experience (UX) must be considered first class priorities for any feature that hopes to provide effective security.
Authentication Shared Responsibility Model Authentication and authorization are shared responsibilities between service providers and end-users.
