@futureimperfect

Security Engineering Director @Cruise | Previously @duo_labs, @Pinterest | W3C Invited Expert for #WebAuthn 🤓 @futureimperfect@mastodon.social

 Ann Arbor, MI
everythingisgray.com/
Joined November 2007
  • Tweets655
  • Following2.9K
  • Followers804
31Media
James Barclay retweeted
Ricky Mondello@rmondello3 Apr 2022
It’s going to be so nice when you don’t have to create passwords anymore.
Sebastian Szturo
@SebastianSzturo3 Apr 2022
.@planetscaledata shows you that your password is leaked during account creation. Pretty genius UX pattern!
8
5
147
This has been really fun to work on. @Cloudflare is now trialing a way to solve CAPTCHAs with a press of a FIDO2 security key (like a Yubikey). blog.cloudflare.com/introduc…

Humanity wastes about 500 years per day on CAPTCHAs. It’s time to end this madness

We want to remove CAPTCHAs completely. The idea is rather simple: a real human should be able to touch or look at their device to prove they are human, without revealing their identity. Let's explore!

blog.cloudflare.com
10
37
13
207
James Barclay retweeted
Duo Security@duosec30 Mar 2021
"It's not an overstatement to say that #passwordless authentication will have the most meaningful global impact on how users access data by making the easiest path the most secure." —@geerittenhouse, SVP and GM, @CiscoSecure
TechCrunch
@TechCrunch30 Mar 2021
Duo goes passwordless tcrn.ch/3u87DXw by @fredericl
8
16
James Barclay retweeted
Ricky Mondello@rmondello26 Jan 2021
A reminder that your company’s SMS-delivered one-time code messages can have their security enhanced by adding some metadata about the domain/app the code is meant for. developer.apple.com/news/?id…

Latest News - Apple Developer

Learn about the latest technologies, events, and policies for developers.

developer.apple.com
3
40
4
106
Are you a UX designer or developer working on FIDO key support for your service? I just reviewed all my accounts and it took too much time and energy to update. I have to maintain a spreadsheet to make sure I did it right! The experiences are wildly inconsistent. HELP!
4
13
3
39
I gotta say that I didn’t expect @codekaiju to compare his and @futureimperfect’s FIDO partnership to that of @KillerMike and @therealelp but it fits quite nicely. 🤜🔐👈
1
2
11
What's new in DevTools in Chrome 87? ✨ 🤩 New CSS Grid debugging tools!!! 🔐 New WebAuthn tab ⚒ Move tools up and down 📟 New Computed sidebar pane Try in Chrome Canary today! Full list of goodies 👉🏼 developers.google.com/web/up…
4
86
11
278
James Barclay retweeted
Ricky Mondello@rmondello19 Sep 2020
Get fucked.
Ben Jacobs
@Bencjacobs19 Sep 2020
McConnell just released a statement: "President Trump’s nominee will receive a vote on the floor of the United States Senate."
2
1
57
Great news! Apple expands support for #FIDO Authentication with Safari 14 (MacOS/iOS)! Websites can use Touch ID / Face ID for secure and frictionless web logins via #WebAuthn API. Great video on how websites can get started: developer.apple.com/videos/p…

Meet Face ID and Touch ID for the web - WWDC20 - Videos - Apple Developer

Face ID and Touch ID provide a frictionless experience when logging in — and now you can use them on your websites in Safari with the Web...

developer.apple.com
1
35
3
59
James Barclay retweeted
Ricky Mondello@rmondello23 Jun 2020
“What’s New in Safari 14” is live! Its “Authentication and Passwords” section mentions breached password notifications, domain-bound SMS codes, Web Authentication with Face ID and Touch ID, and PIN entry for security keys. developer.apple.com/document…
8
28
6
119
[whistles innocently] web.cs.ucdavis.edu/~rogaway/…
31
3
107
Worth noting: the president and state media are continuing to try to define "ANTIFA" as some sort of specific organized group. Push back on this attempted redefinition, because it matters. Anyone can be an antifascist if they want to, you don't have to sign up.
3
13
#CFP for Ekoparty 2020 is OPEN! 🔥 Possible topics: ✔️ Reverse Engineering, Fuzzing, Secure Programming ✔️ Botnets, Malware, Ransomware ✔️ Threat Detection, Hunting and Intelligence ✔️ And more #infosec! Submit your paper ➡️ bit.ly/3bpx4L2 #eko2020
11
12
Come and learn about how EdDSA works! duo.com/labs/tech-notes/what…
2
6
Please share this with researchers, scientists, and epidemiologists who are working to understand and fight #COVID19. As maintainers and developers of widely used open-source computational tools, we've opened a fast-track help desk. Please retweet.
COVID OSS HELPDESK@CovidOSS21 Mar 2020
We are developers, maintainers, and community leaders of open-source scientific computing software. We want to help domain experts fight the #COVID19 pandemic. Researchers, epidemiologists, domain experts, join the fast-track open-source help desk at covid-oss-help.org/.
2
88
1
104
James Barclay retweeted
Login Llama@LoginLlama11 Feb 2020
Ok after being yelled at for jumping the gun on the announcement, I am glad to welcome Apple. I hope to be seeing more of @alanwaketan and @rmondello as we make progress on universal deployment of WebAuthn macrumors.com/2020/02/11/app…

Apple Joins the FIDO Alliance to Help Develop and Promote Authentication Standards

Apple has joined the Fast Identity Online (FIDO) Alliance, an open industry association whose mission is to develop and promote stronger authentication standards and help reduce the world's over-re...

macrumors.com
1
11
3
22
It's official! iOS and iPadOS 13.3 now support FIDO2/Webauthn for NFC, USB and Lightning-based security keys for everyone. Get a key, start enabling FIDO2 with services that support it and ask those who don't what their timeline for adoption is. H̶a̶c̶k̶ Protect the planet!🔒
8
32
2
78
James Barclay retweeted
Olabode Anise
@JustSayO4 Dec 2019
Earlier today @wellhydrated, @futureimperfect, and I presented on work about mishaps with certifican chain validation at #BHEU . If you’re interested in learning more about our work, check out our paper! duo.com/labs/research/chain-…
8
1
11
James Barclay retweeted
Black Hat
@BlackHatEvents22 Nov 2019
In #BHEU Briefing, @futureimperfect & @wellhydrated & @JustSayO explore the implications of poor cryptographic API design, how insecure certificate chain validation implementations can be exploited & how widespread usage of APIs are in certain verticals. ow.ly/RIqb50xhpJ7
4
4
James Barclay retweeted
Duo Labs@duo_labs25 Sep 2019
Sometimes, people commit things that they shouldn't to public GitHub repositories. Today, @jw_sec and @wellhydrated describe all the ways organizations can detect or prevent secrets from being committed. duo.com/labs/research/how-to…
1
20
1
40
Load more