~/talk

My Password Doesn't Work

Talkat FFConf 2017 · 2017-11-09..11-10· [web-platform, security]
slides:none on file

A concrete claim: passwords matter less than control of your email because most logins fall back to a reset link, so password reset proves passwords pointless. Examples and tools: Apple’s signup demands uppercase lowercase numbers bans emojis and lacks localisation, which fails a Bedouin user; delegated authentication (OAuth style) replaces email-reset flows and delegated authentication works. Numbers: an experiment shows ~37% conversion for frictionless signup and echoes the 300 million dollar button lesson. Practical: implement email-first flows and long-lived sessions.

AI-written summary · about

  1. 0:00Start
  2. 24:28databases are magic
  3. 24:53Use long-lived sessions
  4. 25:35Use delegated authentication
  5. 29:00Secure your primary email
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.