Automating Multi-Factor Authentication
summary
Demos show three concrete automation paths and the caveats: Twilio webhook SMS reception buys a virtual number and captures SMS into a logfile, which works reliably; TOTP with a Python library (pyotp) inside Selenium generates codes from the shared secret and logs in automatically; Asterisk + Google ASR phone-call transcription records the automated call, sends audio to speech-to-text, and can extract the six-digit code — flaky at times but can succeed; code and Dockerfile live on GitHub.
AI-written summary · about
chapters (21)
- 0:00Intro
- 0:55About me
- 3:40How Polaczek works
- 4:36Questions
- 4:48Agenda
- 5:38What this session wont give you
- 6:31MultiFactor Authentication
- 7:34Protecting Your System
- 8:35Common Practices
- 9:34SMS Verification
- 12:07Physical Security Tokens
- 12:49Single SignOn
- 13:59Protected OneTime Password
- 15:01Pros Cons
- 15:26Voice Biometrics
- 16:33SMS
- 19:30Python Script
- 21:02Facebook Login
- 22:06Automating Phone Calls
- 25:01Demo
- 26:26Demo Phone Calls
related talks
19mUsing SMS OTPs for Authentication on Mobile apps using Appium & Twilio SDK
25mAuthentication Beyond SMS
51mWeb APIs for delightful two factor auth experiences
24m2FA in 2020 and Beyond
50mA tale of two sides of 2FA
17m2FA in 2020 & Beyond
17mImplementing Multi-factor Authentication
01h 28mHow to 2FA-enable Open Source Applications