BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: [T]OTPs are not as secure as you might believe\n   W
 hen: Friday\, Aug 12\, 17:30 - 17:59 PDT\n   Where: Flamingo - Sunset-Vist
 a Ballroom (Crypto Privacy Village) - [1]Map\n\n   SpeakerBio:Santiago Kan
 torowicz\n   Santiago is a Staff Security Engineer at Twilio\, with 14 yea
 rs of\n   experience in cybersecurity. He worked for 6 years securing and\
 n   designing OTP and TOTP products\, such as Authy and Twilio Verify. He\
 n   is currently dedicated to securing Twilio Voice and video products\n  
  along with Twilio Edge infrastructure. He started his cybersecurity\n   j
 ourney doing Pen Test for 5 years\, and then moved to MercadoLibre to\n   
 kickstart the Appsec deparment. During his journey he discovered\n   pasio
 n for other topics and worked on non-security roles such as a\n   Product 
 Manager and as a Product Architect.\n\n   Description:\n   You likely rece
 ive OTPs (one-time-passwords) all the time\, usually in\n   the form of an
  SMS with a 4 to 8 digit code in it. Pretty common when\n   you sign-in (o
 r register) to Uber\, your bank\, Whatsapp\, etc. The most\n   adopted OTP
  size is 6 digits\, and we just accept that it's hard to\n   guess\, after
  all it's 1 in a million chance\, and leave it there. Some\n   may wonder\
 , what if get a new OTP after the first one expires\,\n   assuming it's an
 other 1 in a million chance\, and forget about it. When\n   you calculate 
 the actual chance of guessing an OTP one after the\n   other\, the odds ar
 e NOT 1 in a million. You will be surprised how the\n   probabilities spir
 al once you start thinking of brute forcing OTPs one\n   after the other\,
  and what about parallelising the brute force among\n   different users\, 
 the surprise is even bigger.\n   '\n\n   1. https://defcon.outel.org/conso
 lidated_page.html#FlamingoThirdFloor\n\n\n
DTEND:20220813T005900Z
DTSTART:20220813T003000Z
LOCATION:CPV - Flamingo - Sunset-Vista Ballroom  (Crypto Privacy Village)
SUMMARY:[T]OTPs are not as secure as you might believe
END:VEVENT
END:VCALENDAR
