WEBVTT

1
00:00:04.385 --> 00:00:04.735
Hello?

2
00:00:04.755 --> 00:00:07.575
<00:00:04.755>Can <00:00:04.895>you <00:00:05.035>hear <00:00:05.175>me? <00:00:05.314>Yeah. <00:00:05.455>Okay. <00:00:05.595>Thank <00:00:05.734>you <00:00:05.875>everyone <00:00:06.015>for <00:00:06.154>coming.

3
00:00:07.955 --> 00:00:10.775
<00:00:07.955>Uh, <00:00:08.082>I <00:00:08.209>know <00:00:08.336>this <00:00:08.464>is <00:00:08.591>your <00:00:08.718>last <00:00:08.845>talk <00:00:08.973>for <00:00:09.100>many <00:00:09.227>of <00:00:09.355>you,

4
00:00:11.115 --> 00:00:12.655
<00:00:11.115>so <00:00:11.392>thank <00:00:11.669>you <00:00:11.946>again <00:00:12.223>for <00:00:12.501>staying.

5
00:00:13.195 --> 00:00:14.615
<00:00:13.195>I'm <00:00:13.450>gonna <00:00:13.706>try <00:00:13.961>something <00:00:14.217>different <00:00:14.473>today

6
00:00:14.615 --> 00:00:16.295
<00:00:14.615>for <00:00:14.790>my <00:00:14.965>presentation, <00:00:15.140>so <00:00:15.315>I <00:00:15.490>hope <00:00:15.665>you <00:00:15.840>like <00:00:16.015>it.

7
00:00:16.705 --> 00:00:21.215
<00:00:16.705>Let's <00:00:16.860>have <00:00:17.016>some <00:00:17.171>fun. <00:00:17.327>So <00:00:17.482>I'm <00:00:17.638>gonna <00:00:17.793>start <00:00:17.949>my <00:00:18.104>talk

8
00:00:21.525 --> 00:00:24.255
<00:00:21.525>sharing <00:00:21.991>this <00:00:22.458>number, <00:00:22.924>91%.

9
00:00:24.835 --> 00:00:28.975
<00:00:24.835>Do <00:00:24.962>you <00:00:25.089>have <00:00:25.216>any <00:00:25.344>idea <00:00:25.471>what <00:00:25.598>this <00:00:25.725>number <00:00:25.853>could <00:00:25.980>be? <00:00:26.107>Any <00:00:26.235>guess?

10
00:00:30.075 --> 00:00:33.375
<00:00:30.075>No. <00:00:30.202>So <00:00:30.329>this <00:00:30.456>is <00:00:30.584>the <00:00:30.711>number <00:00:30.838>of <00:00:30.965>cyber <00:00:31.093>attacks <00:00:31.220>that <00:00:31.347>it <00:00:31.474>started

11
00:00:33.375 --> 00:00:37.695
<00:00:33.375>with <00:00:33.530>a <00:00:33.686>phishing <00:00:33.841>email, <00:00:33.997>and <00:00:34.152>that <00:00:34.308>was <00:00:34.463>in <00:00:34.619>2020, <00:00:34.775>right?

12
00:00:37.845 --> 00:00:40.695
<00:00:37.845>What <00:00:38.078>a <00:00:38.311>year <00:00:38.545>today <00:00:38.778>we're <00:00:39.011>in <00:00:39.245>2024.

13
00:00:40.875 --> 00:00:43.135
<00:00:40.875>I'm <00:00:41.108>sure <00:00:41.341>this <00:00:41.575>percentage <00:00:41.808>is <00:00:42.041>even <00:00:42.275>worse.

14
00:00:44.125 --> 00:00:47.015
<00:00:44.125>Have <00:00:44.265>you <00:00:44.405>ever <00:00:44.545>received <00:00:44.685>an <00:00:44.825>email <00:00:44.965>at <00:00:45.105>this <00:00:45.245>one <00:00:45.385>that, <00:00:45.525>hey,

15
00:00:47.475 --> 00:00:48.855
<00:00:47.475>you <00:00:47.723>have <00:00:47.971>to <00:00:48.220>change <00:00:48.468>your <00:00:48.717>password,

16
00:00:49.075 --> 00:00:52.215
<00:00:49.075>or <00:00:49.202>you <00:00:49.329>have <00:00:49.456>a <00:00:49.584>package <00:00:49.711>waiting <00:00:49.838>for <00:00:49.965>you <00:00:50.093>in <00:00:50.220>your <00:00:50.347>post <00:00:50.475>office,

17
00:00:52.235 --> 00:00:53.735
<00:00:52.235>you <00:00:52.403>have <00:00:52.572>to <00:00:52.741>pay <00:00:52.910>something <00:00:53.078>to <00:00:53.247>pick <00:00:53.416>it <00:00:53.585>up.

18
00:00:53.915 --> 00:00:56.415
<00:00:53.915>You <00:00:54.115>receive <00:00:54.315>a <00:00:54.515>message, <00:00:54.714>an <00:00:54.915>SMS, <00:00:55.115>et <00:00:55.315>cetera.

19
00:00:57.125 --> 00:00:58.135
<00:00:57.125>This <00:00:57.428>is <00:00:57.731>fraud, <00:00:58.034>right?

20
00:00:58.395 --> 00:00:59.655
<00:00:58.395>And <00:00:58.678>why <00:00:58.962>this <00:00:59.245>is <00:00:59.529>happening,

21
00:00:59.765 --> 00:01:02.455
<00:00:59.765>because <00:00:59.998>a <00:01:00.231>lot <00:01:00.465>of <00:01:00.698>companies <00:01:00.931>are <00:01:01.165>receiving,

22
00:01:02.515 --> 00:01:04.135
<00:01:02.515>are <00:01:02.981>suffering <00:01:03.448>cyber <00:01:03.915>attacks.

23
00:01:04.445 --> 00:01:06.695
<00:01:04.444>They <00:01:04.644>have <00:01:04.845>data <00:01:05.044>breaches, <00:01:05.244>they <00:01:05.444>have <00:01:05.645>data <00:01:05.845>leaks.

24
00:01:07.275 --> 00:01:11.415
<00:01:07.275>And <00:01:07.475>those <00:01:07.675>data <00:01:07.875>leaks <00:01:08.075>include <00:01:08.275>email, <00:01:08.475>your <00:01:08.675>password,

25
00:01:11.485 --> 00:01:13.535
<00:01:11.485>your <00:01:11.718>phone <00:01:11.951>number, <00:01:12.185>your <00:01:12.418>home <00:01:12.651>address, <00:01:12.885>right?

26
00:01:14.035 --> 00:01:16.655
<00:01:14.035>So <00:01:14.235>as <00:01:14.435>you <00:01:14.634>can <00:01:14.835>imagine, <00:01:15.035>fraud <00:01:15.235>is <00:01:15.435>everywhere.

27
00:01:17.795 --> 00:01:20.775
<00:01:17.795>So <00:01:18.075>the <00:01:18.355>question <00:01:18.635>is, <00:01:18.915>as <00:01:19.195>developers,

28
00:01:21.955 --> 00:01:23.695
<00:01:21.955>is <00:01:22.130>there <00:01:22.304>anything <00:01:22.480>we <00:01:22.655>can <00:01:22.830>do <00:01:23.005>to <00:01:23.179>feel <00:01:23.355>safer?

29
00:01:24.905 --> 00:01:26.055
<00:01:24.905>Thank <00:01:25.163>you <00:01:25.422>everyone <00:01:25.681>for <00:01:25.940>coming.

30
00:01:26.295 --> 00:01:29.055
<00:01:26.295>I <00:01:26.470>am <00:01:26.645>Albert <00:01:26.820>Navarro, <00:01:26.995>senior <00:01:27.170>developer <00:01:27.345>advocate <00:01:27.520>at <00:01:27.695>Bons,

31
00:01:29.355 --> 00:01:33.775
<00:01:29.355>and <00:01:29.482>I <00:01:29.609>came <00:01:29.736>all <00:01:29.864>the <00:01:29.991>way <00:01:30.118>from <00:01:30.245>Spain <00:01:30.373>to <00:01:30.500>talk <00:01:30.627>about <00:01:30.755>how

32
00:01:33.775 --> 00:01:36.535
<00:01:33.775>to <00:01:33.975>improve <00:01:34.175>security <00:01:34.375>on <00:01:34.575>your <00:01:34.775>user <00:01:34.975>using <00:01:35.175>APIs.

33
00:01:36.915 --> 00:01:39.015
<00:01:36.914>And <00:01:37.148>when <00:01:37.381>we <00:01:37.615>talk <00:01:37.848>about <00:01:38.081>security <00:01:38.315>authentication,

34
00:01:39.075 --> 00:01:41.775
<00:01:39.075>we <00:01:39.250>usually <00:01:39.425>talk <00:01:39.600>about <00:01:39.775>three <00:01:39.950>factor <00:01:40.125>of <00:01:40.300>authentication, <00:01:40.475>right?

35
00:01:41.775 --> 00:01:44.375
<00:01:41.775>What <00:01:41.950>is <00:01:42.125>this? <00:01:42.300>So <00:01:42.475>basically <00:01:42.650>it's <00:01:42.825>something, <00:01:43.000>you <00:01:43.175>know,

36
00:01:44.375 --> 00:01:47.855
<00:01:44.375>usually <00:01:44.550>the <00:01:44.725>password, <00:01:44.900>something <00:01:45.075>you <00:01:45.250>have <00:01:45.425>your <00:01:45.600>mobile <00:01:45.775>phone

37
00:01:47.855 --> 00:01:49.215
<00:01:47.854>for <00:01:48.262>example, <00:01:48.670>or <00:01:49.079>something.

38
00:01:49.215 --> 00:01:51.975
<00:01:49.215>You <00:01:49.415>are <00:01:49.615>your <00:01:49.815>fingerprint, <00:01:50.015>your <00:01:50.215>face, <00:01:50.415>your <00:01:50.615>eyes.

39
00:01:52.835 --> 00:01:54.735
<00:01:52.835>So <00:01:53.068>let's <00:01:53.301>start <00:01:53.535>with <00:01:53.768>something, <00:01:54.001>you <00:01:54.235>know,

40
00:01:54.945 --> 00:01:56.135
<00:01:54.945>let's <00:01:55.301>talk <00:01:55.658>about <00:01:56.015>passwords.

41
00:01:56.675 --> 00:01:58.855
<00:01:56.675>So <00:01:56.815>the <00:01:56.955>idea <00:01:57.095>of <00:01:57.235>the <00:01:57.375>password <00:01:57.515>is, <00:01:57.655>uh, <00:01:57.795>is <00:01:57.935>very <00:01:58.075>simple.

42
00:01:58.915 --> 00:02:00.615
<00:01:58.914>So <00:01:59.089>you <00:01:59.264>have <00:01:59.440>an <00:01:59.615>input, <00:01:59.789>you <00:01:59.964>have <00:02:00.139>your <00:02:00.315>password.

43
00:02:00.925 --> 00:02:03.415
<00:02:00.925>This <00:02:01.158>password <00:02:01.391>goes <00:02:01.625>through <00:02:01.858>a <00:02:02.091>hash <00:02:02.325>function,

44
00:02:03.995 --> 00:02:07.055
<00:02:03.995>and <00:02:04.150>in <00:02:04.306>the <00:02:04.461>end, <00:02:04.617>the <00:02:04.772>hash <00:02:04.928>value <00:02:05.083>is <00:02:05.239>stored <00:02:05.395>somewhere,

45
00:02:07.445 --> 00:02:09.935
<00:02:07.445>usually <00:02:07.678>the <00:02:07.911>data <00:02:08.144>center <00:02:08.378>in <00:02:08.611>the <00:02:08.845>cloud.

46
00:02:11.115 --> 00:02:13.735
<00:02:11.115>And <00:02:11.348>spoiler <00:02:11.581>alert, <00:02:11.815>there <00:02:12.048>is <00:02:12.281>no <00:02:12.515>cloud,

47
00:02:14.145 --> 00:02:15.815
<00:02:14.145>there <00:02:14.425>is <00:02:14.705>just <00:02:14.985>someone <00:02:15.265>else <00:02:15.545>computer.

48
00:02:16.635 --> 00:02:18.415
<00:02:16.635>So <00:02:16.915>our <00:02:17.195>data <00:02:17.475>could <00:02:17.755>be <00:02:18.035>leaked.

49
00:02:19.195 --> 00:02:20.615
<00:02:19.195>So <00:02:19.377>what <00:02:19.560>is <00:02:19.742>the <00:02:19.925>idea <00:02:20.107>of <00:02:20.290>the <00:02:20.473>password?

50
00:02:21.275 --> 00:02:22.615
<00:02:21.275>So <00:02:21.516>the <00:02:21.757>idea <00:02:21.998>is <00:02:22.239>pretty <00:02:22.481>simple,

51
00:02:23.195 --> 00:02:24.895
<00:02:23.195>is <00:02:23.428>basically <00:02:23.661>if <00:02:23.894>you <00:02:24.128>know <00:02:24.361>the <00:02:24.595>secret,

52
00:02:25.195 --> 00:02:26.295
<00:02:25.195>you <00:02:25.393>must <00:02:25.591>be <00:02:25.789>the <00:02:25.987>right <00:02:26.185>person.

53
00:02:27.755 --> 00:02:31.615
<00:02:27.755>No, <00:02:27.894>of <00:02:28.035>course <00:02:28.174>not. <00:02:28.315>So <00:02:28.454>what's <00:02:28.595>the <00:02:28.734>problem <00:02:28.875>with <00:02:29.015>the <00:02:29.155>passwords?

54
00:02:32.265 --> 00:02:34.495
<00:02:32.265>There <00:02:32.464>are <00:02:32.665>many, <00:02:32.864>many <00:02:33.065>problems <00:02:33.265>with <00:02:33.464>the <00:02:33.665>password.

55
00:02:34.495 --> 00:02:36.415
<00:02:34.495>The <00:02:34.670>first <00:02:34.845>one <00:02:35.020>is <00:02:35.195>they're <00:02:35.370>very <00:02:35.545>easy <00:02:35.720>to <00:02:35.895>forget.

56
00:02:36.955 --> 00:02:39.335
<00:02:36.954>And <00:02:37.130>basically <00:02:37.304>because <00:02:37.480>we <00:02:37.654>are <00:02:37.829>forcing <00:02:38.005>users <00:02:38.179>to <00:02:38.355>use

57
00:02:39.755 --> 00:02:41.735
<00:02:39.755>to <00:02:40.035>follow <00:02:40.315>different <00:02:40.595>or <00:02:40.875>difficult <00:02:41.155>patterns,

58
00:02:42.245 --> 00:02:43.695
<00:02:42.245>this <00:02:42.506>sounds <00:02:42.767>familiar <00:02:43.028>to <00:02:43.289>you, <00:02:43.549>right?

59
00:02:43.695 --> 00:02:44.695
<00:02:43.695>So <00:02:43.920>you're <00:02:44.144>creating <00:02:44.370>an <00:02:44.595>account

60
00:02:44.695 --> 00:02:47.095
<00:02:44.695>and <00:02:44.850>we <00:02:45.006>are <00:02:45.161>saying <00:02:45.317>to <00:02:45.472>the <00:02:45.628>user, <00:02:45.783>Hey, <00:02:45.939>don't <00:02:46.095>forget

61
00:02:47.095 --> 00:02:50.935
<00:02:47.095>to <00:02:47.270>use <00:02:47.445>a <00:02:47.620>uppercase, <00:02:47.795>lowercase, <00:02:47.970>a <00:02:48.145>number <00:02:48.320>special <00:02:48.495>character,

62
00:02:51.195 --> 00:02:52.535
<00:02:51.195>simple <00:02:52.401>Batman.

63
00:02:53.075 --> 00:02:54.775
<00:02:53.075>And <00:02:53.308>that's <00:02:53.541>a <00:02:53.774>good <00:02:54.008>practice <00:02:54.241>indeed, <00:02:54.475>right?

64
00:02:55.075 --> 00:02:56.935
<00:02:55.075>But <00:02:55.308>the <00:02:55.541>problem <00:02:55.774>is, <00:02:56.008>is <00:02:56.241>they're <00:02:56.475>really,

65
00:02:56.935 --> 00:02:58.495
<00:02:56.935>really <00:02:57.401>difficult <00:02:57.868>to <00:02:58.335>remember.

66
00:02:59.025 --> 00:03:01.045
<00:02:59.025>And <00:02:59.225>what <00:02:59.425>happened <00:02:59.625>when <00:02:59.825>you <00:03:00.025>don't <00:03:00.225>remember <00:03:00.425>anything,

67
00:03:02.625 --> 00:03:03.805
<00:03:02.625>you <00:03:02.802>put <00:03:02.979>it <00:03:03.156>in <00:03:03.333>a <00:03:03.510>note, <00:03:03.687>right?

68
00:03:03.805 --> 00:03:06.125
<00:03:03.805>This <00:03:03.960>is <00:03:04.116>a <00:03:04.271>real <00:03:04.427>photo <00:03:04.582>from <00:03:04.738>a, <00:03:04.893>in <00:03:05.049>an <00:03:05.205>interview,

69
00:03:06.125 --> 00:03:07.685
<00:03:06.125>from <00:03:06.475>a <00:03:06.825>security <00:03:07.175>agent <00:03:07.525>from,

70
00:03:07.985 --> 00:03:09.805
<00:03:07.985>and <00:03:08.160>I <00:03:08.335>don't <00:03:08.510>remember <00:03:08.685>the <00:03:08.860>office <00:03:09.035>from <00:03:09.210>the <00:03:09.385>us

71
00:03:10.755 --> 00:03:13.335
<00:03:10.755>but <00:03:10.954>they <00:03:11.155>say, <00:03:11.355>well <00:03:11.555>use <00:03:11.755>different <00:03:11.954>passwords, <00:03:12.155>right?

72
00:03:13.555 --> 00:03:15.615
<00:03:13.555>And <00:03:13.755>what <00:03:13.955>happened <00:03:14.155>when <00:03:14.355>you <00:03:14.555>use <00:03:14.755>different <00:03:14.955>passwords,

73
00:03:16.235 --> 00:03:17.255
<00:03:16.235>you <00:03:16.541>use <00:03:16.847>different <00:03:17.153>notes.

74
00:03:17.715 --> 00:03:21.845
<00:03:17.715>That's <00:03:17.870>a <00:03:18.026>problem. <00:03:18.181>Another, <00:03:18.337>uh, <00:03:18.492>problem <00:03:18.648>with <00:03:18.803>the <00:03:18.959>password <00:03:19.115>is

75
00:03:21.845 --> 00:03:23.845
<00:03:21.845>that <00:03:22.078>they're <00:03:22.311>easy <00:03:22.545>to, <00:03:22.778>to <00:03:23.011>to <00:03:23.245>guess.

76
00:03:24.625 --> 00:03:28.285
<00:03:24.625>So <00:03:24.741>this <00:03:24.858>is <00:03:24.975>the, <00:03:25.091>uh, <00:03:25.208>top <00:03:25.325>10 <00:03:25.441>most <00:03:25.558>common <00:03:25.675>password <00:03:25.791>in <00:03:25.908>the <00:03:26.025>2024.

77
00:03:29.275 --> 00:03:32.655
<00:03:29.275>We <00:03:29.391>have <00:03:29.508>classics <00:03:29.625>like <00:03:29.741>1, <00:03:29.858>2, <00:03:29.975>3, <00:03:30.091>4, <00:03:30.208>5, <00:03:30.325>6 <00:03:30.441>to <00:03:30.558>have <00:03:30.675>20.

78
00:03:33.435 --> 00:03:36.855
<00:03:33.435>My <00:03:33.590>favorite <00:03:33.746>one <00:03:33.901>is <00:03:34.057>number <00:03:34.212>nine, <00:03:34.368>how <00:03:34.523>lazy <00:03:34.679>you <00:03:34.835>are

79
00:03:36.995 --> 00:03:38.055
<00:03:36.995>to <00:03:37.233>have <00:03:37.472>this <00:03:37.710>password, <00:03:37.949>right?

80
00:03:38.085 --> 00:03:42.015
<00:03:38.085>This, <00:03:38.260>it's <00:03:38.435>terrible. <00:03:38.610>So <00:03:38.785>they're <00:03:38.960>also <00:03:39.135>easy <00:03:39.310>to <00:03:39.485>crack

81
00:03:42.555 --> 00:03:45.495
<00:03:42.555>and <00:03:42.755>you <00:03:42.955>don't <00:03:43.155>have <00:03:43.355>like <00:03:43.555>super <00:03:43.755>sophisticated <00:03:43.955>software.

82
00:03:46.715 --> 00:03:47.975
<00:03:46.715>Do <00:03:46.904>you <00:03:47.093>know <00:03:47.282>this <00:03:47.471>video? <00:03:47.660>Have <00:03:47.849>you,

83
00:03:47.975 --> 00:03:48.975
<00:03:47.975>have <00:03:48.200>you <00:03:48.424>watched <00:03:48.650>this <00:03:48.875>video?

84
00:03:49.365 --> 00:03:52.295
<00:03:49.365>It's <00:03:49.520>in <00:03:49.676>YouTube. <00:03:49.831>So <00:03:49.987>it's <00:03:50.142>from <00:03:50.298>the <00:03:50.453>Jimmy <00:03:50.609>Kimmel <00:03:50.765>show.

85
00:03:52.605 --> 00:03:55.015
<00:03:52.605>Basically <00:03:52.780>it's, <00:03:52.954>it's <00:03:53.130>a <00:03:53.304>reporter <00:03:53.480>on <00:03:53.655>the <00:03:53.829>streets <00:03:54.005>asking

86
00:03:55.015 --> 00:03:57.055
<00:03:55.015>people, <00:03:55.214>can <00:03:55.415>you <00:03:55.614>share <00:03:55.815>your <00:03:56.015>passport <00:03:56.214>with <00:03:56.415>me?

87
00:03:57.755 --> 00:04:00.855
<00:03:57.755>So <00:03:57.930>I, <00:03:58.105>I <00:03:58.280>took <00:03:58.454>one <00:03:58.630>example <00:03:58.805>from <00:03:58.980>this <00:03:59.155>interview

88
00:04:01.675 --> 00:04:03.495
<00:04:01.675>and <00:04:01.955>the <00:04:02.235>conversation <00:04:02.515>goes <00:04:02.795>as <00:04:03.075>follows.

89
00:04:03.495 --> 00:04:04.815
<00:04:03.495>So <00:04:03.732>basically <00:04:03.970>it's <00:04:04.207>what <00:04:04.445>is <00:04:04.683>your

90
00:04:04.975 --> 00:04:06.175
<00:04:04.975>passport <00:04:05.245>as <00:04:05.515>the, <00:04:05.785>the <00:04:06.055>reporter?

91
00:04:06.315 --> 00:04:08.815
<00:04:06.315>And <00:04:06.442>she <00:04:06.569>said, <00:04:06.696>where <00:04:06.824>is <00:04:06.951>my <00:04:07.078>cat <00:04:07.205>name <00:04:07.333>and <00:04:07.460>a <00:04:07.587>random <00:04:07.715>number?

92
00:04:09.315 --> 00:04:11.335
<00:04:09.315>Oh, <00:04:09.454>you <00:04:09.595>have, <00:04:09.734>you <00:04:09.875>got <00:04:10.015>this <00:04:10.155>cat <00:04:10.295>for <00:04:10.435>a <00:04:10.575>while? <00:04:10.715>Yeah.

93
00:04:11.365 --> 00:04:14.455
<00:04:11.365>Yeah, <00:04:11.520>it's <00:04:11.676>my <00:04:11.831>childhood <00:04:11.987>pet. <00:04:12.142>Oh, <00:04:12.298>nice. <00:04:12.453>What <00:04:12.609>her <00:04:12.765>name?

94
00:04:15.075 --> 00:04:19.135
<00:04:15.075>Her <00:04:15.214>name <00:04:15.355>is <00:04:15.494>Jolie. <00:04:15.635>Uh, <00:04:15.774>so <00:04:15.915>your <00:04:16.055>password <00:04:16.195>would <00:04:16.334>be <00:04:16.474>Jolie

95
00:04:19.135 --> 00:04:21.015
<00:04:19.135>and <00:04:19.368>then <00:04:19.601>a <00:04:19.834>number <00:04:20.068>like <00:04:20.301>number <00:04:20.534>one?

96
00:04:21.045 --> 00:04:23.655
<00:04:21.045>Yeah. <00:04:21.245>Well <00:04:21.445>like <00:04:21.645>my <00:04:21.845>birthday. <00:04:22.045>And <00:04:22.245>that's <00:04:22.445>real.

97
00:04:23.755 --> 00:04:25.015
<00:04:23.755>You <00:04:24.038>can't <00:04:24.322>watch <00:04:24.605>the <00:04:24.889>video.

98
00:04:25.235 --> 00:04:28.175
<00:04:25.235>And <00:04:25.362>that <00:04:25.489>is <00:04:25.616>a, <00:04:25.744>it's <00:04:25.871>a, <00:04:25.998>it's <00:04:26.125>an <00:04:26.253>example <00:04:26.380>of <00:04:26.507>the <00:04:26.635>many,

99
00:04:28.175 --> 00:04:29.775
<00:04:28.175>many <00:04:28.525>people <00:04:28.875>sharing <00:04:29.225>the <00:04:29.575>password.

100
00:04:29.775 --> 00:04:33.935
<00:04:29.775>That <00:04:29.914>was <00:04:30.054>terrible. <00:04:30.195>Do <00:04:30.335>you <00:04:30.474>know <00:04:30.614>this <00:04:30.755>website <00:04:30.895>have <00:04:31.034>been <00:04:31.174>pound?

101
00:04:33.935 --> 00:04:34.935
<00:04:33.935>This <00:04:34.235>is <00:04:34.535>amazing, <00:04:34.835>right?

102
00:04:35.235 --> 00:04:37.015
<00:04:35.235>So <00:04:35.435>this <00:04:35.635>website, <00:04:35.835>you <00:04:36.035>can <00:04:36.235>enter <00:04:36.435>your <00:04:36.635>email

103
00:04:37.515 --> 00:04:40.735
<00:04:37.515>and <00:04:37.655>the <00:04:37.794>website <00:04:37.935>is <00:04:38.075>checking <00:04:38.215>if <00:04:38.354>your <00:04:38.495>email <00:04:38.635>address <00:04:38.775>has <00:04:38.914>been

104
00:04:40.765 --> 00:04:42.335
<00:04:40.765>compromised, <00:04:41.044>has <00:04:41.325>been <00:04:41.604>part <00:04:41.885>of <00:04:42.164>one

105
00:04:42.335 --> 00:04:44.095
<00:04:42.335>of <00:04:42.568>these <00:04:42.801>data <00:04:43.034>leaks <00:04:43.268>from <00:04:43.501>the <00:04:43.734>companies.

106
00:04:44.515 --> 00:04:46.495
<00:04:44.515>And <00:04:44.715>the <00:04:44.914>good <00:04:45.115>point <00:04:45.315>about <00:04:45.515>this <00:04:45.715>website <00:04:45.914>is

107
00:04:46.495 --> 00:04:48.175
<00:04:46.495>that <00:04:46.728>they <00:04:46.961>have <00:04:47.195>a <00:04:47.428>nice <00:04:47.661>restful, <00:04:47.895>API

108
00:04:48.875 --> 00:04:51.615
<00:04:48.875>and <00:04:49.108>for <00:04:49.341>example, <00:04:49.575>we <00:04:49.808>can <00:04:50.041>use <00:04:50.275>range.

109
00:04:51.615 --> 00:04:53.135
<00:04:51.615>They <00:04:51.957>have <00:04:52.299>many <00:04:52.641>different <00:04:52.983>endpoints,

110
00:04:53.135 --> 00:04:56.135
<00:04:53.135>but <00:04:53.290>we <00:04:53.446>can <00:04:53.601>use <00:04:53.757>range <00:04:53.912>to <00:04:54.068>do <00:04:54.223>something <00:04:54.379>like <00:04:54.534>this.

111
00:04:56.615 --> 00:04:59.855
<00:04:56.615>I <00:04:56.742>can <00:04:56.869>take <00:04:56.996>my <00:04:57.124>password, <00:04:57.251>by <00:04:57.378>the <00:04:57.505>way, <00:04:57.633>don't <00:04:57.760>use <00:04:57.887>that <00:04:58.015>password.

112
00:04:59.925 --> 00:05:01.055
<00:04:59.925>It's <00:05:00.264>terrible, <00:05:00.603>my <00:05:00.942>password,

113
00:05:01.475 --> 00:05:03.975
<00:05:01.475>but <00:05:01.675>I'm <00:05:01.875>gonna, <00:05:02.075>I'm <00:05:02.275>gonna <00:05:02.475>use <00:05:02.675>the <00:05:02.875>example.

114
00:05:04.035 --> 00:05:05.175
<00:05:04.035>So <00:05:04.206>this <00:05:04.377>is <00:05:04.548>my <00:05:04.719>password, <00:05:04.890>this <00:05:05.061>is

115
00:05:05.175 --> 00:05:06.255
<00:05:05.175>the <00:05:05.369>hash <00:05:05.563>value <00:05:05.758>of <00:05:05.952>the <00:05:06.147>password.

116
00:05:06.515 --> 00:05:09.495
<00:05:06.515>And <00:05:06.655>I <00:05:06.794>can <00:05:06.935>make <00:05:07.075>an <00:05:07.215>API <00:05:07.354>call <00:05:07.495>to <00:05:07.635>the <00:05:07.775>range <00:05:07.914>endpoint.

117
00:05:09.675 --> 00:05:12.935
<00:05:09.675>Use <00:05:09.850>the <00:05:10.025>five <00:05:10.200>charters <00:05:10.375>of <00:05:10.550>the <00:05:10.725>hash <00:05:10.900>password, <00:05:11.075>alright?

118
00:05:13.635 --> 00:05:15.055
<00:05:13.635>And <00:05:13.890>this <00:05:14.146>is <00:05:14.401>gonna <00:05:14.657>allow <00:05:14.913>us

119
00:05:15.155 --> 00:05:18.295
<00:05:15.155>to <00:05:15.310>create <00:05:15.466>cool <00:05:15.621>stuff <00:05:15.777>like <00:05:15.932>the <00:05:16.088>report <00:05:16.243>from <00:05:16.399>Google <00:05:16.554>saying,

120
00:05:18.355 --> 00:05:21.135
<00:05:18.355>Hey, <00:05:18.555>this, <00:05:18.755>your <00:05:18.955>password <00:05:19.155>has <00:05:19.355>been <00:05:19.555>compromised <00:05:19.755>in

121
00:05:21.135 --> 00:05:22.215
<00:05:21.135>one <00:05:21.378>of <00:05:21.621>these <00:05:21.864>data <00:05:22.107>leaks.

122
00:05:22.275 --> 00:05:23.775
<00:05:22.275>So <00:05:22.612>be <00:05:22.950>careful, <00:05:23.287>change <00:05:23.625>it.

123
00:05:23.995 --> 00:05:26.375
<00:05:23.995>Or <00:05:24.135>we <00:05:24.275>can <00:05:24.415>even <00:05:24.555>inform <00:05:24.695>the <00:05:24.835>user <00:05:24.975>when <00:05:25.115>they're <00:05:25.255>creating <00:05:25.395>an

124
00:05:26.375 --> 00:05:27.735
<00:05:26.375>account <00:05:26.783>that <00:05:27.191>is <00:05:27.599>powerful.

125
00:05:28.955 --> 00:05:32.295
<00:05:28.955>Um, <00:05:29.094>the <00:05:29.234>question <00:05:29.375>is, <00:05:29.515>are <00:05:29.655>we <00:05:29.794>save, <00:05:29.935>we <00:05:30.075>integrate <00:05:30.215>this <00:05:30.354>API

126
00:05:32.295 --> 00:05:35.015
<00:05:32.295>with <00:05:32.422>our <00:05:32.549>login <00:05:32.676>form, <00:05:32.804>what <00:05:32.931>do <00:05:33.058>you <00:05:33.185>think <00:05:33.313>I <00:05:33.440>would <00:05:33.567>save <00:05:33.695>yet?

127
00:05:35.915 --> 00:05:38.895
<00:05:35.915>Yes, <00:05:36.148>no, <00:05:36.381>no, <00:05:36.615>of <00:05:36.848>course <00:05:37.081>not, <00:05:37.315>right?

128
00:05:39.435 --> 00:05:41.575
<00:05:39.435>So <00:05:39.668>we <00:05:39.901>need <00:05:40.135>extra <00:05:40.368>layer <00:05:40.601>of <00:05:40.835>authentication

129
00:05:42.395 --> 00:05:44.815
<00:05:42.395>and <00:05:42.594>we <00:05:42.794>must <00:05:42.995>provide <00:05:43.195>further <00:05:43.395>proof <00:05:43.594>of <00:05:43.794>identity.

130
00:05:45.425 --> 00:05:47.855
<00:05:45.425>Let's <00:05:45.580>talk <00:05:45.736>about <00:05:45.891>something <00:05:46.047>you <00:05:46.202>have <00:05:46.358>like <00:05:46.513>your <00:05:46.669>mobile <00:05:46.825>phone.

131
00:05:48.845 --> 00:05:50.745
<00:05:48.845>Do <00:05:49.020>you <00:05:49.195>know <00:05:49.370>what <00:05:49.545>is <00:05:49.720>OTP <00:05:49.895>one <00:05:50.070>time <00:05:50.245>password?

132
00:05:51.095 --> 00:05:53.425
<00:05:51.095>This <00:05:51.235>is <00:05:51.375>similar <00:05:51.515>to <00:05:51.655>a <00:05:51.795>password, <00:05:51.935>but <00:05:52.075>not <00:05:52.215>like <00:05:52.355>this <00:05:52.495>one.

133
00:05:53.895 --> 00:05:56.105
<00:05:53.895>It's <00:05:54.128>something <00:05:54.361>that <00:05:54.594>you <00:05:54.828>prove <00:05:55.061>your <00:05:55.294>identity

134
00:05:56.245 --> 00:05:57.525
<00:05:56.245>by <00:05:56.533>using <00:05:56.820>your <00:05:57.109>mobile <00:05:57.397>phone.

135
00:05:57.635 --> 00:06:01.325
<00:05:57.635>Basically <00:05:57.790>the <00:05:57.946>idea <00:05:58.101>is <00:05:58.257>you <00:05:58.412>check <00:05:58.568>your, <00:05:58.723>uh, <00:05:58.879>password <00:05:59.034>together

136
00:06:01.325 --> 00:06:02.645
<00:06:01.325>with <00:06:01.622>your <00:06:01.919>one <00:06:02.216>time <00:06:02.513>password.

137
00:06:02.665 --> 00:06:04.405
<00:06:02.665>If <00:06:02.865>everything <00:06:03.065>match, <00:06:03.265>you <00:06:03.465>are <00:06:03.665>good <00:06:03.865>to <00:06:04.065>go.

138
00:06:05.785 --> 00:06:07.605
<00:06:05.785>Uh, <00:06:06.065>that <00:06:06.345>is <00:06:06.625>called <00:06:06.905>two-factor <00:06:07.185>authentication.

139
00:06:07.765 --> 00:06:10.805
<00:06:07.765>I <00:06:07.965>guess <00:06:08.164>everyone <00:06:08.365>here <00:06:08.565>has <00:06:08.765>two-factor <00:06:08.965>authentication, <00:06:09.164>right?

140
00:06:11.025 --> 00:06:12.605
<00:06:11.025>Yes. <00:06:11.375>No. <00:06:11.724>Yes. <00:06:12.075>Okay, <00:06:12.424>good.

141
00:06:13.825 --> 00:06:15.485
<00:06:13.825>Um, <00:06:14.175>there <00:06:14.525>are <00:06:14.875>different <00:06:15.224>ways

142
00:06:15.485 --> 00:06:17.565
<00:06:15.485>of <00:06:15.835>implementing <00:06:16.185>two <00:06:16.535>factor <00:06:16.885>authentication.

143
00:06:17.665 --> 00:06:20.205
<00:06:17.665>The <00:06:17.865>we <00:06:18.065>have <00:06:18.265>message <00:06:18.465>you <00:06:18.665>it <00:06:18.865>an <00:06:19.065>SMS,

144
00:06:20.205 --> 00:06:24.005
<00:06:20.205>you <00:06:20.344>receive <00:06:20.484>a <00:06:20.625>a <00:06:20.765>voicemail, <00:06:20.905>we <00:06:21.044>have <00:06:21.185>an <00:06:21.325>app, <00:06:21.465>for <00:06:21.604>example,

145
00:06:24.665 --> 00:06:25.925
<00:06:24.665>we <00:06:25.043>have <00:06:25.421>push <00:06:25.799>notification.

146
00:06:25.925 --> 00:06:26.965
<00:06:25.925>This <00:06:26.159>is <00:06:26.393>actually <00:06:26.627>the <00:06:26.861>method

147
00:06:26.965 --> 00:06:28.565
<00:06:26.965>that <00:06:27.164>people <00:06:27.364>like <00:06:27.565>Google <00:06:27.765>are <00:06:27.965>using <00:06:28.164>these <00:06:28.364>days.

148
00:06:28.665 --> 00:06:30.285
<00:06:28.665>You <00:06:28.898>get <00:06:29.131>identification <00:06:29.365>in <00:06:29.598>your <00:06:29.831>mobile <00:06:30.065>phone

149
00:06:30.745 --> 00:06:32.125
<00:06:30.745>and <00:06:30.993>we <00:06:31.241>can <00:06:31.490>even <00:06:31.738>use <00:06:31.987>hardware.

150
00:06:32.145 --> 00:06:33.405
<00:06:32.145>You <00:06:32.522>have <00:06:32.900>this <00:06:33.279>curing

151
00:06:33.405 --> 00:06:35.325
<00:06:33.405>that <00:06:33.684>is <00:06:33.965>providing <00:06:34.244>this <00:06:34.525>onetime <00:06:34.804>password,

152
00:06:35.325 --> 00:06:36.885
<00:06:35.325>but <00:06:35.500>you <00:06:35.675>can <00:06:35.849>even <00:06:36.025>plug <00:06:36.200>it <00:06:36.375>on <00:06:36.550>the <00:06:36.724>USB.

153
00:06:38.185 --> 00:06:39.845
<00:06:38.185>Um, <00:06:38.535>the <00:06:38.885>most <00:06:39.235>used, <00:06:39.585>uh,

154
00:06:39.845 --> 00:06:42.245
<00:06:39.845>two <00:06:40.020>factor <00:06:40.195>identification <00:06:40.370>method <00:06:40.545>today <00:06:40.720>is <00:06:40.895>still <00:06:41.070>the <00:06:41.245>message.

155
00:06:42.905 --> 00:06:44.885
<00:06:42.905>Uh, <00:06:43.184>let's <00:06:43.465>talk <00:06:43.744>about <00:06:44.025>verify <00:06:44.304>API

156
00:06:45.705 --> 00:06:47.285
<00:06:45.705>verify <00:06:46.055>API <00:06:46.405>implements <00:06:46.755>two <00:06:47.104>factor

157
00:06:47.605 --> 00:06:48.885
<00:06:47.605>identification <00:06:47.989>through <00:06:48.373>different <00:06:48.757>channels.

158
00:06:48.885 --> 00:06:50.805
<00:06:48.885>So <00:06:49.118>we <00:06:49.351>have <00:06:49.585>SMS <00:06:49.818>voice, <00:06:50.051>WhatsApp <00:06:50.284>email.

159
00:06:51.465 --> 00:06:55.045
<00:06:51.465>We <00:06:51.640>have <00:06:51.815>this <00:06:51.990>endpoint <00:06:52.165>is <00:06:52.340>called <00:06:52.515>verify <00:06:52.690>post <00:06:52.865>request.

160
00:06:55.305 --> 00:06:56.805
<00:06:55.305>And <00:06:55.530>we <00:06:55.755>have <00:06:55.980>to <00:06:56.205>provide <00:06:56.430>a <00:06:56.655>body.

161
00:06:57.545 --> 00:06:59.245
<00:06:57.545>The <00:06:57.778>body's <00:06:58.011>gonna <00:06:58.245>be <00:06:58.478>something <00:06:58.711>like <00:06:58.945>this.

162
00:06:59.265 --> 00:07:02.085
<00:06:59.265>So <00:06:59.405>the <00:06:59.544>idea <00:06:59.685>is <00:06:59.825>to <00:06:59.965>provide <00:07:00.104>that <00:07:00.245>workflow <00:07:00.385>of <00:07:00.525>the <00:07:00.664>methods

163
00:07:02.235 --> 00:07:03.805
<00:07:02.235>that <00:07:02.468>you <00:07:02.701>want <00:07:02.935>implement <00:07:03.168>in <00:07:03.401>your <00:07:03.635>service.

164
00:07:04.185 --> 00:07:06.965
<00:07:04.185>We <00:07:04.312>are <00:07:04.439>gonna <00:07:04.566>say, <00:07:04.694>Hey, <00:07:04.821>send <00:07:04.948>me <00:07:05.075>the <00:07:05.203>one <00:07:05.330>time <00:07:05.457>password <00:07:05.585>using

165
00:07:06.985 --> 00:07:10.125
<00:07:06.985>an <00:07:07.140>SMS <00:07:07.296>if <00:07:07.451>that <00:07:07.607>fails, <00:07:07.762>send <00:07:07.918>me <00:07:08.073>a <00:07:08.229>voice <00:07:08.385>call.

166
00:07:11.705 --> 00:07:14.405
<00:07:11.705>So <00:07:11.860>the <00:07:12.016>response <00:07:12.171>is <00:07:12.327>gonna <00:07:12.482>be <00:07:12.638>something <00:07:12.793>like <00:07:12.949>request <00:07:13.104>ID

167
00:07:14.745 --> 00:07:16.565
<00:07:14.745>and <00:07:14.978>something <00:07:15.211>is <00:07:15.445>that <00:07:15.678>the <00:07:15.911>check <00:07:16.145>URL

168
00:07:16.565 --> 00:07:17.925
<00:07:16.565>that <00:07:16.809>gonna <00:07:17.054>be <00:07:17.299>covering <00:07:17.544>that <00:07:17.789>later.

169
00:07:18.225 --> 00:07:21.975
<00:07:18.225>But <00:07:18.341>the <00:07:18.458>request <00:07:18.575>ID <00:07:18.691>we <00:07:18.808>are <00:07:18.925>gonna <00:07:19.041>be <00:07:19.158>using <00:07:19.275>again <00:07:19.391>in <00:07:19.508>the <00:07:19.625>same

170
00:07:22.255 --> 00:07:25.695
<00:07:22.255>endpoint <00:07:22.395>with <00:07:22.534>this <00:07:22.675>body, <00:07:22.815>with <00:07:22.955>the <00:07:23.094>code <00:07:23.235>that <00:07:23.375>we <00:07:23.515>had <00:07:23.655>received

171
00:07:26.315 --> 00:07:29.335
<00:07:26.315>via <00:07:26.490>SMS <00:07:26.665>and <00:07:26.840>together <00:07:27.015>with <00:07:27.190>the <00:07:27.365>code <00:07:27.540>that, <00:07:27.715>uh,

172
00:07:29.595 --> 00:07:31.375
<00:07:29.595>and <00:07:29.945>the <00:07:30.295>authorization, <00:07:30.645>uh, <00:07:30.995>ID,

173
00:07:31.875 --> 00:07:34.015
<00:07:31.875>we <00:07:32.108>can <00:07:32.341>get <00:07:32.575>the <00:07:32.808>response <00:07:33.041>like <00:07:33.275>completed.

174
00:07:34.115 --> 00:07:36.015
<00:07:34.115>You <00:07:34.270>are <00:07:34.426>the <00:07:34.581>user <00:07:34.737>that <00:07:34.892>you <00:07:35.048>are <00:07:35.203>supposed <00:07:35.359>to <00:07:35.515>be.

175
00:07:36.405 --> 00:07:38.655
<00:07:36.405>Okay, <00:07:36.871>is <00:07:37.338>this <00:07:37.804>safe?

176
00:07:38.755 --> 00:07:40.655
<00:07:38.755>So <00:07:38.955>we <00:07:39.155>have <00:07:39.355>the <00:07:39.555>one <00:07:39.755>time <00:07:39.955>password <00:07:40.155>implemented

177
00:07:41.235 --> 00:07:43.535
<00:07:41.235>and <00:07:41.410>we <00:07:41.585>have <00:07:41.760>improved <00:07:41.935>the <00:07:42.110>security <00:07:42.285>of <00:07:42.460>our <00:07:42.635>system.

178
00:07:43.565 --> 00:07:46.295
<00:07:43.565>What <00:07:43.705>do <00:07:43.844>you <00:07:43.985>believe? <00:07:44.125>This <00:07:44.265>is <00:07:44.405>something <00:07:44.545>that <00:07:44.685>is <00:07:44.825>safe <00:07:44.965>enough?

179
00:07:47.115 --> 00:07:51.495
<00:07:47.115>Yes, <00:07:47.255>no. <00:07:47.395>So, <00:07:47.535>uh, <00:07:47.675>it's <00:07:47.815>much <00:07:47.955>better, <00:07:48.095>but <00:07:48.235>it's <00:07:48.375>not <00:07:48.515>perfect.

180
00:07:52.515 --> 00:07:56.905
<00:07:52.515>But <00:07:52.642>what <00:07:52.769>happened, <00:07:52.896>how <00:07:53.024>did <00:07:53.151>we <00:07:53.278>know <00:07:53.405>is <00:07:53.533>that <00:07:53.660>the, <00:07:53.787>the <00:07:53.914>phone

181
00:07:56.905 --> 00:08:00.065
<00:07:56.905>that <00:07:57.080>is <00:07:57.255>receiving <00:07:57.429>this <00:07:57.604>Ms <00:07:57.780>SMS <00:07:57.955>is <00:07:58.130>valid, <00:07:58.304>right?

182
00:08:00.765 --> 00:08:03.225
<00:08:00.765>We <00:08:00.965>are <00:08:01.164>gonna <00:08:01.365>be <00:08:01.565>covering <00:08:01.765>number <00:08:01.965>inside <00:08:02.164>API.

183
00:08:03.225 --> 00:08:05.825
<00:08:03.225>So <00:08:03.425>this <00:08:03.625>API <00:08:03.825>is <00:08:04.025>taking <00:08:04.225>the <00:08:04.425>validity <00:08:04.625>reachability

184
00:08:05.845 --> 00:08:07.385
<00:08:05.845>and <00:08:06.043>the <00:08:06.241>roaming <00:08:06.439>state <00:08:06.637>of <00:08:06.835>a <00:08:07.033>phone <00:08:07.231>number

185
00:08:07.845 --> 00:08:09.065
<00:08:07.845>and <00:08:08.119>it <00:08:08.394>has <00:08:08.668>one <00:08:08.943>endpoint.

186
00:08:09.065 --> 00:08:10.905
<00:08:09.065>It's <00:08:09.344>standard <00:08:09.625>together <00:08:09.905>with <00:08:10.185>a <00:08:10.465>format.

187
00:08:11.045 --> 00:08:13.265
<00:08:11.045>If <00:08:11.200>you <00:08:11.356>have <00:08:11.511>an <00:08:11.667>example <00:08:11.822>there, <00:08:11.978>it's <00:08:12.133>basically <00:08:12.289>saying, <00:08:12.445>Hey,

188
00:08:13.265 --> 00:08:14.705
<00:08:13.265>give <00:08:13.524>me <00:08:13.783>the <00:08:14.042>response <00:08:14.301>in <00:08:14.561>JSO

189
00:08:14.925 --> 00:08:16.905
<00:08:14.925>and <00:08:15.205>can <00:08:15.485>you <00:08:15.765>check <00:08:16.045>the <00:08:16.325>number

190
00:08:17.045 --> 00:08:19.265
<00:08:17.045>inside <00:08:17.278>the <00:08:17.511>availability <00:08:17.745>of <00:08:17.978>this <00:08:18.211>phone <00:08:18.445>number?

191
00:08:19.685 --> 00:08:21.585
<00:08:19.685>And <00:08:19.860>the <00:08:20.035>response <00:08:20.210>is <00:08:20.385>gonna <00:08:20.560>be <00:08:20.735>something <00:08:20.910>like <00:08:21.085>this.

192
00:08:21.585 --> 00:08:24.785
<00:08:21.585>We're <00:08:21.760>gonna <00:08:21.935>be <00:08:22.109>receiving <00:08:22.284>the <00:08:22.460>current <00:08:22.635>carrier, <00:08:22.810>the <00:08:22.984>original.

193
00:08:25.645 --> 00:08:28.305
<00:08:25.645>If <00:08:25.878>both <00:08:26.111>hardware <00:08:26.344>doesn't <00:08:26.578>match, <00:08:26.811>probably <00:08:27.044>it's

194
00:08:28.305 --> 00:08:29.345
<00:08:28.305>because <00:08:28.617>something <00:08:28.929>happened, <00:08:29.241>right?

195
00:08:29.345 --> 00:08:30.865
<00:08:29.345>Maybe <00:08:29.618>it's <00:08:29.892>because <00:08:30.165>your <00:08:30.439>number <00:08:30.713>is

196
00:08:30.865 --> 00:08:31.945
<00:08:30.865>not <00:08:31.059>where <00:08:31.253>it's <00:08:31.448>supposed <00:08:31.642>to <00:08:31.837>be.

197
00:08:33.165 --> 00:08:34.865
<00:08:33.164>And <00:08:33.444>again, <00:08:33.724>are <00:08:34.005>we <00:08:34.284>save <00:08:34.564>now?

198
00:08:35.005 --> 00:08:37.225
<00:08:35.005>So <00:08:35.145>we <00:08:35.284>have <00:08:35.424>new <00:08:35.564>API <00:08:35.705>on <00:08:35.845>top <00:08:35.985>of <00:08:36.125>the, <00:08:36.265>the <00:08:36.405>rest

199
00:08:37.225 --> 00:08:39.145
<00:08:37.225>of <00:08:37.691>the <00:08:38.158>multifactor <00:08:38.625>authentication.

200
00:08:40.375 --> 00:08:43.435
<00:08:40.375>The <00:08:40.549>question <00:08:40.725>now <00:08:40.900>is <00:08:41.075>what <00:08:41.250>if <00:08:41.424>someone <00:08:41.600>is <00:08:41.775>trying

201
00:08:43.435 --> 00:08:46.395
<00:08:43.434>to <00:08:43.609>fake <00:08:43.784>your <00:08:43.959>identity <00:08:44.135>is <00:08:44.310>pretending <00:08:44.484>to <00:08:44.660>be <00:08:44.834>you,

202
00:08:46.535 --> 00:08:48.555
<00:08:46.535>is <00:08:46.768>calling <00:08:47.001>your <00:08:47.235>internet <00:08:47.468>your <00:08:47.701>mobile <00:08:47.935>provider

203
00:08:48.615 --> 00:08:51.915
<00:08:48.615>and <00:08:48.755>say, <00:08:48.895>Hey, <00:08:49.035>can <00:08:49.175>you <00:08:49.315>please <00:08:49.455>send <00:08:49.595>me <00:08:49.735>a <00:08:49.875>new <00:08:50.015>sim

204
00:08:51.915 --> 00:08:53.035
<00:08:51.915>card <00:08:52.166>because <00:08:52.419>I <00:08:52.670>lost <00:08:52.923>it.

205
00:08:53.665 --> 00:08:57.165
<00:08:53.665>That <00:08:53.792>is <00:08:53.919>real. <00:08:54.046>This <00:08:54.174>is <00:08:54.301>the <00:08:54.428>what <00:08:54.555>is <00:08:54.683>called <00:08:54.810>the <00:08:54.937>Siwa <00:08:55.064>attack.

206
00:08:58.185 --> 00:09:00.605
<00:08:58.185>The <00:08:58.359>siwa <00:08:58.535>attack <00:08:58.709>is <00:08:58.885>basically <00:08:59.060>kayaking <00:08:59.234>your <00:08:59.410>phone <00:08:59.584>number

207
00:09:00.705 --> 00:09:02.565
<00:09:00.705>by <00:09:00.905>linking <00:09:01.105>it <00:09:01.305>with <00:09:01.505>a <00:09:01.705>different <00:09:01.905>sim <00:09:02.105>card.

208
00:09:03.425 --> 00:09:06.445
<00:09:03.425>And <00:09:03.599>the <00:09:03.775>the <00:09:03.949>consequence <00:09:04.125>is <00:09:04.300>that <00:09:04.474>sending <00:09:04.650>a <00:09:04.824>message

209
00:09:07.295 --> 00:09:09.605
<00:09:07.295>using <00:09:07.528>two-factor <00:09:07.761>authentication <00:09:07.995>is <00:09:08.228>not <00:09:08.461>safe <00:09:08.694>anymore.

210
00:09:10.495 --> 00:09:11.725
<00:09:10.495>We're <00:09:10.716>gonna <00:09:10.937>be <00:09:11.159>covering <00:09:11.380>about, <00:09:11.602>uh,

211
00:09:11.725 --> 00:09:16.525
<00:09:11.725>talking <00:09:11.841>about <00:09:11.958>siwa <00:09:12.075>API <00:09:12.191>Sims <00:09:12.308>swap <00:09:12.425>a <00:09:12.541>PID <00:09:12.658>if <00:09:12.775>the <00:09:12.891>sync <00:09:13.008>card <00:09:13.125>has

212
00:09:16.525 --> 00:09:19.205
<00:09:16.525>been <00:09:16.725>linked <00:09:16.925>to <00:09:17.125>a <00:09:17.324>phone <00:09:17.525>number, <00:09:17.725>has <00:09:17.925>recently,

213
00:09:19.305 --> 00:09:20.525
<00:09:19.305>has <00:09:19.853>recently <00:09:20.403>changed.

214
00:09:21.345 --> 00:09:24.125
<00:09:21.345>So <00:09:21.461>we <00:09:21.578>have <00:09:21.695>to <00:09:21.811>make <00:09:21.928>sure <00:09:22.045>that <00:09:22.161>the <00:09:22.278>user <00:09:22.395>mobile <00:09:22.511>number <00:09:22.628>can <00:09:22.745>be

215
00:09:24.125 --> 00:09:26.005
<00:09:24.125>used <00:09:24.591>for <00:09:25.058>authentication <00:09:25.525>purposes.

216
00:09:26.945 --> 00:09:28.885
<00:09:26.945>The <00:09:27.225>API <00:09:27.505>has <00:09:27.785>two <00:09:28.065>different <00:09:28.345>endpoints.

217
00:09:28.885 --> 00:09:30.285
<00:09:28.885>This <00:09:29.095>is <00:09:29.305>the <00:09:29.515>first <00:09:29.725>one <00:09:29.935>is <00:09:30.145>check.

218
00:09:30.895 --> 00:09:34.805
<00:09:30.895>Check <00:09:31.035>is <00:09:31.175>receiving <00:09:31.314>a <00:09:31.454>post <00:09:31.595>request <00:09:31.735>we <00:09:31.875>have <00:09:32.015>with <00:09:32.155>this <00:09:32.295>body.

219
00:09:35.105 --> 00:09:38.885
<00:09:35.105>So <00:09:35.232>we <00:09:35.359>are <00:09:35.486>sending <00:09:35.614>the <00:09:35.741>phone <00:09:35.868>number <00:09:35.995>with <00:09:36.123>the <00:09:36.250>range <00:09:36.377>of <00:09:36.505>time

220
00:09:38.885 --> 00:09:41.845
<00:09:38.885>that <00:09:39.012>we <00:09:39.139>want <00:09:39.266>to <00:09:39.394>check <00:09:39.521>if <00:09:39.648>your <00:09:39.775>phone <00:09:39.903>number <00:09:40.030>has <00:09:40.157>been <00:09:40.285>linked

221
00:09:41.865 --> 00:09:42.925
<00:09:41.865>to <00:09:42.103>a <00:09:42.342>new <00:09:42.580>SIM <00:09:42.819>card.

222
00:09:44.265 --> 00:09:46.445
<00:09:44.265>So <00:09:44.439>the <00:09:44.615>response <00:09:44.790>is <00:09:44.965>gonna <00:09:45.140>be <00:09:45.314>something <00:09:45.490>like <00:09:45.665>yes

223
00:09:46.585 --> 00:09:48.085
<00:09:46.585>or <00:09:46.922>no <00:09:47.260>through <00:09:47.597>or <00:09:47.935>false.

224
00:09:49.225 --> 00:09:53.405
<00:09:49.225>And <00:09:49.352>if <00:09:49.479>we <00:09:49.606>receive <00:09:49.734>a <00:09:49.861>true, <00:09:49.988>if <00:09:50.115>we <00:09:50.243>are <00:09:50.370>the <00:09:50.497>company <00:09:50.625>trying

225
00:09:53.405 --> 00:09:56.125
<00:09:53.405>to <00:09:53.532>send <00:09:53.659>you <00:09:53.786>the <00:09:53.914>SMS, <00:09:54.041>we <00:09:54.168>can <00:09:54.295>say, <00:09:54.423>well <00:09:54.550>that <00:09:54.677>looks <00:09:54.805>suspicious,

226
00:09:56.565 --> 00:09:57.845
<00:09:56.565>probably <00:09:56.795>we <00:09:57.025>should <00:09:57.256>stop <00:09:57.486>sending <00:09:57.717>you

227
00:09:57.845 --> 00:10:00.645
<00:09:57.845>to <00:09:58.125>factor <00:09:58.405>authentication <00:09:58.685>using <00:09:58.965>SMS, <00:09:59.245>right?

228
00:10:01.655 --> 00:10:03.875
<00:10:01.655>We <00:10:01.855>can <00:10:02.055>use <00:10:02.255>the <00:10:02.454>second <00:10:02.655>endpoint <00:10:02.855>retrieve <00:10:03.055>date.

229
00:10:04.305 --> 00:10:06.715
<00:10:04.305>This <00:10:04.584>endpoint <00:10:04.864>is <00:10:05.145>using <00:10:05.425>a <00:10:05.704>post

230
00:10:07.695 --> 00:10:10.635
<00:10:07.695>and <00:10:07.850>in <00:10:08.006>the <00:10:08.161>body <00:10:08.317>where <00:10:08.472>sending <00:10:08.628>only <00:10:08.783>the <00:10:08.939>phone <00:10:09.095>number,

231
00:10:11.575 --> 00:10:15.675
<00:10:11.575>the <00:10:11.750>response <00:10:11.925>is <00:10:12.100>gonna <00:10:12.275>contain <00:10:12.450>the <00:10:12.625>timestamp <00:10:12.800>exactly <00:10:12.975>when

232
00:10:16.065 --> 00:10:19.315
<00:10:16.065>your <00:10:16.205>phone <00:10:16.345>number <00:10:16.485>has <00:10:16.625>been <00:10:16.765>linked <00:10:16.905>with <00:10:17.045>a <00:10:17.185>new <00:10:17.325>SIM <00:10:17.465>card.

233
00:10:21.465 --> 00:10:24.405
<00:10:21.465>So, <00:10:21.620>so <00:10:21.776>far <00:10:21.931>it's <00:10:22.087>looking <00:10:22.242>great. <00:10:22.398>We <00:10:22.553>have <00:10:22.709>OTP <00:10:22.865>enabled.

234
00:10:25.265 --> 00:10:27.885
<00:10:25.265>We <00:10:25.392>are, <00:10:25.519>we, <00:10:25.646>we <00:10:25.774>know <00:10:25.901>that <00:10:26.028>the, <00:10:26.155>the <00:10:26.283>phone <00:10:26.410>number <00:10:26.537>is <00:10:26.665>legit

235
00:10:28.025 --> 00:10:32.045
<00:10:28.025>and <00:10:28.165>we <00:10:28.305>have <00:10:28.444>checked <00:10:28.584>that <00:10:28.725>there <00:10:28.865>was <00:10:29.005>no <00:10:29.145>sim <00:10:29.285>swag, <00:10:29.425>right?

236
00:10:32.945 --> 00:10:35.525
<00:10:32.945>So <00:10:33.100>what <00:10:33.256>if <00:10:33.411>we <00:10:33.567>want <00:10:33.722>to <00:10:33.878>keep <00:10:34.033>user <00:10:34.189>logging <00:10:34.345>in?

237
00:10:36.145 --> 00:10:38.645
<00:10:36.145>Do <00:10:36.300>we <00:10:36.456>have <00:10:36.611>to <00:10:36.767>go <00:10:36.922>through <00:10:37.078>the <00:10:37.233>whole <00:10:37.389>process <00:10:37.545>again?

238
00:10:39.765 --> 00:10:41.265
<00:10:39.765>That's <00:10:40.035>why <00:10:40.305>we <00:10:40.574>have <00:10:40.845>another <00:10:41.115>API,

239
00:10:41.265 --> 00:10:42.865
<00:10:41.265>it's <00:10:41.615>called <00:10:41.965>number <00:10:42.314>verification <00:10:42.665>API,

240
00:10:43.075 --> 00:10:47.625
<00:10:43.075>which <00:10:43.275>is <00:10:43.475>basically <00:10:43.675>authenticating <00:10:43.875>users <00:10:44.075>using <00:10:44.275>mobile <00:10:44.475>data.

241
00:10:48.865 --> 00:10:51.125
<00:10:48.865>So <00:10:49.040>you <00:10:49.215>remember <00:10:49.390>the <00:10:49.565>idea <00:10:49.740>of <00:10:49.915>something <00:10:50.090>you <00:10:50.265>have,

242
00:10:51.435 --> 00:10:53.525
<00:10:51.435>something <00:10:51.635>you <00:10:51.834>have <00:10:52.035>is <00:10:52.234>also <00:10:52.435>the <00:10:52.635>sim <00:10:52.834>card.

243
00:10:53.585 --> 00:10:56.085
<00:10:53.585>So <00:10:53.760>you <00:10:53.935>can <00:10:54.110>perform <00:10:54.285>authentication <00:10:54.460>using <00:10:54.635>your <00:10:54.810>sim <00:10:54.985>card.

244
00:10:57.425 --> 00:11:01.205
<00:10:57.425>The <00:10:57.541>idea <00:10:57.658>of <00:10:57.775>this <00:10:57.891>a <00:10:58.008>p <00:10:58.125>is <00:10:58.241>we <00:10:58.358>have <00:10:58.474>one, <00:10:58.591>uh, <00:10:58.708>endpoints <00:10:58.824>verify

245
00:11:01.545 --> 00:11:03.765
<00:11:01.545>and <00:11:01.700>it's <00:11:01.856>receiving <00:11:02.011>a, <00:11:02.167>it <00:11:02.322>is, <00:11:02.478>it's <00:11:02.633>a <00:11:02.789>post <00:11:02.944>API

246
00:11:05.465 --> 00:11:07.885
<00:11:05.465>and <00:11:05.665>the <00:11:05.865>flow <00:11:06.065>for <00:11:06.265>implementing <00:11:06.465>this <00:11:06.665>is <00:11:06.865>similar

247
00:11:08.025 --> 00:11:09.205
<00:11:08.025>to <00:11:08.379>to <00:11:08.733>this <00:11:09.087>example.

248
00:11:09.305 --> 00:11:12.125
<00:11:09.305>So <00:11:09.505>basically <00:11:09.704>we <00:11:09.905>have <00:11:10.104>our <00:11:10.305>mobile <00:11:10.505>application <00:11:10.704>connected

249
00:11:12.125 --> 00:11:13.725
<00:11:12.125>to <00:11:12.475>your, <00:11:12.825>uh, <00:11:13.175>data <00:11:13.525>mobile.

250
00:11:14.625 --> 00:11:16.325
<00:11:14.625>We <00:11:14.905>are <00:11:15.185>sending <00:11:15.465>the <00:11:15.745>authorization <00:11:16.025>request.

251
00:11:16.475 --> 00:11:19.285
<00:11:16.475>Step <00:11:16.615>number <00:11:16.755>one, <00:11:16.895>we <00:11:17.035>are <00:11:17.175>getting <00:11:17.315>back <00:11:17.455>from <00:11:17.595>the, <00:11:17.735>the <00:11:17.875>server,

252
00:11:19.475 --> 00:11:21.405
<00:11:19.475>your <00:11:19.825>authorization <00:11:20.175>code <00:11:20.525>number <00:11:20.875>two.

253
00:11:21.705 --> 00:11:23.125
<00:11:21.705>And <00:11:21.960>then <00:11:22.216>we <00:11:22.471>change <00:11:22.727>that <00:11:22.983>code

254
00:11:23.265 --> 00:11:25.165
<00:11:23.265>for <00:11:23.545>access <00:11:23.824>token <00:11:24.105>three <00:11:24.385>and <00:11:24.665>four.

255
00:11:25.885 --> 00:11:27.985
<00:11:25.885>We <00:11:26.060>get <00:11:26.235>that. <00:11:26.410>We <00:11:26.585>have <00:11:26.760>that, <00:11:26.935>uh, <00:11:27.110>access <00:11:27.285>token.

256
00:11:27.985 --> 00:11:30.065
<00:11:27.985>And <00:11:28.185>without <00:11:28.385>access <00:11:28.585>token, <00:11:28.785>we <00:11:28.985>can <00:11:29.185>call <00:11:29.385>verify

257
00:11:30.525 --> 00:11:33.425
<00:11:30.525>to <00:11:30.652>check <00:11:30.779>if <00:11:30.906>we <00:11:31.034>are <00:11:31.161>what <00:11:31.288>we <00:11:31.415>are <00:11:31.543>supposed <00:11:31.670>to <00:11:31.797>be, <00:11:31.925>right?

258
00:11:33.425 --> 00:11:36.385
<00:11:33.425>Basically <00:11:33.625>checking <00:11:33.824>the <00:11:34.025>number, <00:11:34.224>the <00:11:34.425>phone <00:11:34.625>number <00:11:34.824>together

259
00:11:36.615 --> 00:11:38.225
<00:11:36.615>with <00:11:37.081>the <00:11:37.548>physical <00:11:38.015>device

260
00:11:38.415 --> 00:11:40.385
<00:11:38.415>because <00:11:38.765>the <00:11:39.115>network <00:11:39.464>operator <00:11:39.814>knows

261
00:11:40.385 --> 00:11:41.425
<00:11:40.385>where <00:11:40.572>the <00:11:40.759>traffic <00:11:40.946>is <00:11:41.133>coming <00:11:41.320>from.

262
00:11:42.045 --> 00:11:45.265
<00:11:42.045>And <00:11:42.200>basically <00:11:42.356>number <00:11:42.511>seven, <00:11:42.667>we <00:11:42.822>return <00:11:42.978>to <00:11:43.133>the <00:11:43.289>user, <00:11:43.444>yes

263
00:11:45.265 --> 00:11:48.185
<00:11:45.265>or <00:11:45.420>no, <00:11:45.576>we, <00:11:45.731>you <00:11:45.887>can <00:11:46.042>continue <00:11:46.198>with <00:11:46.353>your <00:11:46.509>authentication <00:11:46.665>flow.

264
00:11:49.795 --> 00:11:51.655
<00:11:49.795>So <00:11:49.969>the <00:11:50.145>good <00:11:50.319>thing <00:11:50.495>about <00:11:50.670>this <00:11:50.844>is <00:11:51.020>this, <00:11:51.194>uh,

265
00:11:51.895 --> 00:11:54.645
<00:11:51.895>functionality <00:11:52.050>could <00:11:52.206>be <00:11:52.361>used <00:11:52.517>with, <00:11:52.672>uh, <00:11:52.828>within <00:11:52.983>the <00:11:53.139>verify <00:11:53.295>API

266
00:11:54.905 --> 00:11:56.485
<00:11:54.905>and <00:11:55.255>it's <00:11:55.605>called <00:11:55.954>selling <00:11:56.305>authentication.

267
00:11:57.425 --> 00:12:00.125
<00:11:57.425>And <00:11:57.564>the <00:11:57.704>idea, <00:11:57.844>if <00:11:57.984>you <00:11:58.125>remember, <00:11:58.265>verify <00:11:58.405>we <00:11:58.545>have <00:11:58.685>this <00:11:58.824>workflow

268
00:12:00.125 --> 00:12:02.605
<00:12:00.125>of <00:12:00.405>different <00:12:00.685>ways <00:12:00.965>of <00:12:01.245>performing <00:12:01.525>authentication,

269
00:12:02.625 --> 00:12:04.125
<00:12:02.625>the <00:12:02.895>SMS, <00:12:03.165>the <00:12:03.435>voice, <00:12:03.705>et <00:12:03.975>cetera.

270
00:12:04.465 --> 00:12:06.605
<00:12:04.465>We <00:12:04.620>can <00:12:04.776>use <00:12:04.931>a <00:12:05.087>new <00:12:05.242>channel. <00:12:05.398>It's <00:12:05.553>called <00:12:05.709>selling <00:12:05.865>Out.

271
00:12:07.025 --> 00:12:09.845
<00:12:07.025>And <00:12:07.199>uh, <00:12:07.375>in <00:12:07.550>case <00:12:07.725>the <00:12:07.900>SMS <00:12:08.074>or <00:12:08.250>the <00:12:08.425>Voice

272
00:12:10.105 --> 00:12:12.605
<00:12:10.105>or <00:12:10.280>WhatsApp <00:12:10.455>fails, <00:12:10.630>we <00:12:10.805>can <00:12:10.980>use <00:12:11.155>that <00:12:11.330>one <00:12:11.505>right

273
00:12:12.605 --> 00:12:13.605
<00:12:12.605>with <00:12:12.905>our <00:12:13.205>phone <00:12:13.505>number.

274
00:12:15.905 --> 00:12:19.125
<00:12:15.905>So <00:12:16.079>let's <00:12:16.255>talk <00:12:16.430>about <00:12:16.605>something <00:12:16.780>you <00:12:16.954>are <00:12:17.130>like <00:12:17.305>the,

275
00:12:19.125 --> 00:12:21.565
<00:12:19.125>the <00:12:19.358>fingerprint <00:12:19.591>for <00:12:19.825>example, <00:12:20.058>in <00:12:20.291>that <00:12:20.525>case,

276
00:12:21.585 --> 00:12:25.685
<00:12:21.585>we <00:12:21.725>can <00:12:21.865>use <00:12:22.005>something <00:12:22.145>like <00:12:22.285>Amazon <00:12:22.425>recognition, <00:12:22.565>A <00:12:22.705>PIA <00:12:22.845>lot <00:12:22.985>of,

277
00:12:25.705 --> 00:12:28.485
<00:12:25.705>uh, <00:12:25.905>phones <00:12:26.105>today, <00:12:26.305>they <00:12:26.505>have <00:12:26.705>fingerprint <00:12:26.905>recognition, <00:12:27.105>right?

278
00:12:28.545 --> 00:12:31.725
<00:12:28.545>But <00:12:28.700>in <00:12:28.856>some <00:12:29.011>situation <00:12:29.167>you <00:12:29.322>want <00:12:29.478>to <00:12:29.633>extend <00:12:29.789>that <00:12:29.944>functionality

279
00:12:31.745 --> 00:12:32.965
<00:12:31.745>for <00:12:32.019>example, <00:12:32.294>in <00:12:32.568>your <00:12:32.843>computer.

280
00:12:33.665 --> 00:12:35.765
<00:12:33.665>So <00:12:33.944>you <00:12:34.224>can <00:12:34.505>detect <00:12:34.785>face <00:12:35.064>liveness

281
00:12:35.825 --> 00:12:38.325
<00:12:35.825>and <00:12:36.105>you <00:12:36.385>can <00:12:36.665>validate <00:12:36.945>the <00:12:37.225>screenshot

282
00:12:38.325 --> 00:12:39.885
<00:12:38.325>of <00:12:38.605>your <00:12:38.885>face <00:12:39.165>with <00:12:39.445>a <00:12:39.725>selfie.

283
00:12:39.905 --> 00:12:42.245
<00:12:39.905>You <00:12:40.105>have <00:12:40.305>previously <00:12:40.505>a <00:12:40.704>store <00:12:40.905>something <00:12:41.105>like <00:12:41.305>this.

284
00:12:42.245 --> 00:12:44.205
<00:12:42.245>So <00:12:42.420>you <00:12:42.595>have <00:12:42.770>this <00:12:42.945>face, <00:12:43.120>you <00:12:43.295>have <00:12:43.470>this <00:12:43.645>screenshot

285
00:12:44.585 --> 00:12:45.805
<00:12:44.585>and <00:12:44.804>you <00:12:45.024>can <00:12:45.243>use <00:12:45.463>your <00:12:45.683>webcam,

286
00:12:45.805 --> 00:12:49.245
<00:12:45.805>you <00:12:45.960>can <00:12:46.116>use <00:12:46.271>your <00:12:46.427>mobile <00:12:46.582>phone <00:12:46.738>camera <00:12:46.893>to <00:12:47.049>compare <00:12:47.204>yourself

287
00:12:49.355 --> 00:12:50.885
<00:12:49.355>with <00:12:49.814>a <00:12:50.273>previous <00:12:50.732>selfie.

288
00:12:51.905 --> 00:12:53.485
<00:12:51.905>If <00:12:52.185>everything <00:12:52.464>is <00:12:52.745>correct, <00:12:53.025>you <00:12:53.305>are

289
00:12:53.685 --> 00:12:54.885
<00:12:53.685>verified <00:12:53.865>and <00:12:54.045>you <00:12:54.224>are <00:12:54.405>good <00:12:54.585>to <00:12:54.765>go.

290
00:12:56.825 --> 00:12:59.285
<00:12:56.825>So <00:12:57.105>now <00:12:57.385>again, <00:12:57.665>I'm <00:12:57.945>trying <00:12:58.225>to,

291
00:12:59.585 --> 00:13:00.925
<00:12:59.585>I'm <00:12:59.826>asking <00:13:00.067>again <00:13:00.308>the <00:13:00.549>same <00:13:00.790>question.

292
00:13:02.105 --> 00:13:04.485
<00:13:02.105>Are <00:13:02.305>we <00:13:02.505>safe? <00:13:02.705>Now <00:13:02.905>we <00:13:03.105>have <00:13:03.305>been <00:13:03.505>talking

293
00:13:04.485 --> 00:13:05.645
<00:13:04.485>about <00:13:04.693>a <00:13:04.902>lot <00:13:05.111>of <00:13:05.320>APIs, <00:13:05.529>right?

294
00:13:07.115 --> 00:13:09.205
<00:13:07.115>Well, <00:13:07.395>looks <00:13:07.675>really <00:13:07.955>good <00:13:08.235>to <00:13:08.515>me.

295
00:13:09.585 --> 00:13:11.605
<00:13:09.585>We <00:13:09.865>have <00:13:10.145>uh, <00:13:10.425>checked <00:13:10.705>the <00:13:10.985>number

296
00:13:11.835 --> 00:13:13.565
<00:13:11.835>that <00:13:12.185>is <00:13:12.535>uh, <00:13:12.885>uh, <00:13:13.235>authenticated.

297
00:13:13.565 --> 00:13:15.605
<00:13:13.565>It's <00:13:13.740>legit. <00:13:13.915>We <00:13:14.090>don't <00:13:14.265>have <00:13:14.440>any <00:13:14.615>sims <00:13:14.790>of <00:13:14.965>attack.

298
00:13:15.605 --> 00:13:17.325
<00:13:15.605>Everything <00:13:15.955>is <00:13:16.305>going <00:13:16.655>well, <00:13:17.005>right?

299
00:13:18.585 --> 00:13:21.085
<00:13:18.585>But <00:13:18.785>so <00:13:18.985>far <00:13:19.185>we <00:13:19.385>have <00:13:19.585>been <00:13:19.785>covering <00:13:19.985>something.

300
00:13:21.085 --> 00:13:23.045
<00:13:21.085>You <00:13:21.285>know <00:13:21.485>something, <00:13:21.685>you <00:13:21.885>have <00:13:22.085>something <00:13:22.285>you <00:13:22.485>are,

301
00:13:23.585 --> 00:13:26.325
<00:13:23.585>if <00:13:23.760>you <00:13:23.935>read <00:13:24.110>about <00:13:24.285>this, <00:13:24.460>some <00:13:24.635>security <00:13:24.810>expert <00:13:24.985>say

302
00:13:26.325 --> 00:13:28.805
<00:13:26.325>that <00:13:26.525>you <00:13:26.725>can <00:13:26.925>also <00:13:27.125>include <00:13:27.325>a <00:13:27.525>four <00:13:27.725>option.

303
00:13:28.805 --> 00:13:30.845
<00:13:28.805>It's <00:13:29.155>somewhere <00:13:29.505>you <00:13:29.854>are. <00:13:30.204>Imagine

304
00:13:31.195 --> 00:13:32.685
<00:13:31.195>that <00:13:31.463>you <00:13:31.731>lost <00:13:31.999>your <00:13:32.267>mobile <00:13:32.536>phone

305
00:13:33.265 --> 00:13:37.525
<00:13:33.265>or <00:13:33.392>you <00:13:33.519>are, <00:13:33.646>you <00:13:33.774>go <00:13:33.901>to <00:13:34.028>an <00:13:34.155>ATM, <00:13:34.283>you <00:13:34.410>withdraw <00:13:34.537>some <00:13:34.665>money

306
00:13:38.345 --> 00:13:40.085
<00:13:38.345>and <00:13:38.625>look <00:13:38.905>suspicious <00:13:39.185>for <00:13:39.465>your <00:13:39.745>bank

307
00:13:40.145 --> 00:13:41.965
<00:13:40.145>and <00:13:40.300>they <00:13:40.456>want <00:13:40.611>to <00:13:40.767>check <00:13:40.922>if <00:13:41.078>that <00:13:41.233>is <00:13:41.389>actually <00:13:41.545>you.

308
00:13:42.465 --> 00:13:44.085
<00:13:42.465>So <00:13:42.698>they <00:13:42.931>can <00:13:43.165>call <00:13:43.398>you <00:13:43.631>by <00:13:43.865>phone

309
00:13:44.545 --> 00:13:47.525
<00:13:44.545>and <00:13:44.719>they <00:13:44.895>can <00:13:45.069>use <00:13:45.245>an <00:13:45.420>API <00:13:45.594>like <00:13:45.770>device <00:13:45.944>location.

310
00:13:47.645 --> 00:13:51.605
<00:13:47.645>API <00:13:47.761>to <00:13:47.878>check <00:13:47.995>that <00:13:48.111>you <00:13:48.228>are <00:13:48.345>the <00:13:48.461>person <00:13:48.578>who <00:13:48.694>are <00:13:48.811>in <00:13:48.928>the <00:13:49.045>ATM.

311
00:13:51.945 --> 00:13:54.645
<00:13:51.945>So <00:13:52.145>this <00:13:52.345>API <00:13:52.545>have <00:13:52.745>one <00:13:52.945>single <00:13:53.145>endpoint <00:13:53.345>retrieve.

312
00:13:54.905 --> 00:13:58.245
<00:13:54.905>You'll <00:13:55.079>provide <00:13:55.255>your <00:13:55.430>phone <00:13:55.605>number <00:13:55.780>with <00:13:55.954>more <00:13:56.130>optional <00:13:56.305>stuff,

313
00:13:58.245 --> 00:13:59.925
<00:13:58.245>your <00:13:58.595>IP <00:13:58.945>address, <00:13:59.295>et <00:13:59.645>cetera.

314
00:14:01.505 --> 00:14:05.485
<00:14:01.505>And <00:14:01.660>the <00:14:01.816>API <00:14:01.971>is <00:14:02.127>gonna <00:14:02.282>return <00:14:02.438>your <00:14:02.593>latitude <00:14:02.749>a <00:14:02.905>longitude

315
00:14:05.485 --> 00:14:09.045
<00:14:05.485>with <00:14:05.660>a <00:14:05.835>radius <00:14:06.010>in <00:14:06.185>this <00:14:06.360>case, <00:14:06.535>800 <00:14:06.710>meters <00:14:06.885>about

316
00:14:09.135 --> 00:14:10.805
<00:14:09.135>where <00:14:09.485>your <00:14:09.835>device <00:14:10.185>is <00:14:10.535>located.

317
00:14:11.235 --> 00:14:14.735
<00:14:11.235>Okay? <00:14:11.515>So <00:14:11.795>this <00:14:12.075>is <00:14:12.355>pretty <00:14:12.635>cool

318
00:14:14.735 --> 00:14:16.175
<00:14:14.735>because <00:14:14.994>you <00:14:15.253>can <00:14:15.512>do <00:14:15.771>the <00:14:16.031>opposite.

319
00:14:16.235 --> 00:14:17.335
<00:14:16.235>You <00:14:16.730>have, <00:14:17.225>right?

320
00:14:17.395 --> 00:14:18.855
<00:14:17.395>You <00:14:17.582>can <00:14:17.770>ask, <00:14:17.958>you <00:14:18.145>have <00:14:18.333>the <00:14:18.521>phone <00:14:18.709>number

321
00:14:19.195 --> 00:14:21.095
<00:14:19.195>and <00:14:19.395>you <00:14:19.595>can <00:14:19.795>provide <00:14:19.995>the <00:14:20.195>latitude, <00:14:20.395>a <00:14:20.595>longitude,

322
00:14:21.115 --> 00:14:22.295
<00:14:21.115>and <00:14:21.380>you <00:14:21.646>can <00:14:21.911>say, <00:14:22.176>okay,

323
00:14:22.315 --> 00:14:24.375
<00:14:22.315>is <00:14:22.490>this <00:14:22.665>person <00:14:22.840>really <00:14:23.015>in <00:14:23.190>this <00:14:23.365>place <00:14:23.540>in <00:14:23.715>Berlin?

324
00:14:24.955 --> 00:14:27.615
<00:14:24.955>And <00:14:25.130>the <00:14:25.305>API <00:14:25.480>is <00:14:25.655>gonna <00:14:25.830>say, <00:14:26.005>no <00:14:26.180>they're <00:14:26.355>not.

325
00:14:28.065 --> 00:14:30.775
<00:14:28.065>Maybe <00:14:28.220>you <00:14:28.376>should <00:14:28.531>call <00:14:28.687>them <00:14:28.842>by <00:14:28.998>phone <00:14:29.153>to <00:14:29.309>really <00:14:29.465>check

326
00:14:31.245 --> 00:14:33.255
<00:14:31.245>that <00:14:31.478>this <00:14:31.711>person <00:14:31.945>is <00:14:32.178>in <00:14:32.411>that <00:14:32.645>location.

327
00:14:33.365 --> 00:14:36.655
<00:14:33.365>Alright? <00:14:33.831>So <00:14:34.298>to <00:14:34.765>recap,

328
00:14:37.955 --> 00:14:39.935
<00:14:37.955>we <00:14:38.155>have <00:14:38.355>been <00:14:38.555>covering <00:14:38.755>different <00:14:38.955>aspects <00:14:39.155>of <00:14:39.355>authentication.

329
00:14:40.115 --> 00:14:42.375
<00:14:40.115>If <00:14:40.348>you <00:14:40.581>have <00:14:40.815>to <00:14:41.048>take <00:14:41.281>one <00:14:41.515>screenshot,

330
00:14:42.775 --> 00:14:45.815
<00:14:42.775>I <00:14:42.915>will <00:14:43.055>say <00:14:43.194>this <00:14:43.334>is <00:14:43.475>the <00:14:43.615>one <00:14:43.755>we <00:14:43.895>have <00:14:44.035>been <00:14:44.175>covering.

331
00:14:45.815 --> 00:14:49.695
<00:14:45.815>Having <00:14:45.970>phone <00:14:46.126>API <00:14:46.281>verify, <00:14:46.437>API <00:14:46.592>number, <00:14:46.748>insight <00:14:46.903>and <00:14:47.059>sim <00:14:47.215>swap

332
00:14:49.715 --> 00:14:53.525
<00:14:49.715>and <00:14:49.948>number <00:14:50.181>verification <00:14:50.415>for, <00:14:50.648>uh, <00:14:50.881>authenticating <00:14:51.115>something.

333
00:14:53.525 --> 00:14:56.325
<00:14:53.525>You <00:14:53.758>have <00:14:53.991>Amazon <00:14:54.225>condition, <00:14:54.458>something <00:14:54.691>you <00:14:54.925>are.

334
00:14:56.345 --> 00:14:58.685
<00:14:56.345>And <00:14:56.695>finally, <00:14:57.045>device, <00:14:57.395>location, <00:14:57.745>API.

335
00:14:58.795 --> 00:15:00.325
<00:14:58.795>Somewhere, <00:14:59.254>somewhere <00:14:59.713>you <00:15:00.172>are.

336
00:15:01.265 --> 00:15:03.845
<00:15:01.265>So <00:15:01.420>I <00:15:01.576>hope <00:15:01.731>this, <00:15:01.887>uh, <00:15:02.042>give <00:15:02.198>you <00:15:02.353>some <00:15:02.509>ideas, <00:15:02.665>how

337
00:15:03.845 --> 00:15:05.045
<00:15:03.845>to <00:15:04.025>increase <00:15:04.205>the <00:15:04.385>security <00:15:04.564>of <00:15:04.745>your <00:15:04.925>users

338
00:15:05.785 --> 00:15:09.045
<00:15:05.785>and <00:15:06.018>avoid <00:15:06.251>bad <00:15:06.485>guys <00:15:06.718>doing <00:15:06.951>several <00:15:07.185>attacks.

339
00:15:09.815 --> 00:15:10.565
<00:15:09.815>Thank <00:15:10.040>you <00:15:10.265>very <00:15:10.490>much.

340
00:15:16.335 --> 00:15:16.805
<00:15:16.335>Thank <00:15:16.757>you.

341
00:15:17.055 --> 00:15:18.085
<00:15:17.055>Thank <00:15:17.518>you <00:15:17.982>Alvaro.

342
00:15:18.145 --> 00:15:20.285
<00:15:18.145>Uh, <00:15:18.345>we <00:15:18.545>have <00:15:18.745>a <00:15:18.944>question <00:15:19.145>from, <00:15:19.345>uh, <00:15:19.545>Vladimir.

343
00:15:20.355 --> 00:15:21.805
<00:15:20.355>Okay, <00:15:20.616>so <00:15:20.877>please <00:15:21.138>tell <00:15:21.399>us, <00:15:21.660>uh,

344
00:15:21.865 --> 00:15:23.685
<00:15:21.865>how <00:15:22.065>do <00:15:22.265>you <00:15:22.465>know <00:15:22.665>the <00:15:22.865>latest <00:15:23.065>SIM <00:15:23.265>swap?

345
00:15:24.745 --> 00:15:27.845
<00:15:24.745>We <00:15:24.920>know <00:15:25.095>that <00:15:25.270>because <00:15:25.445>the, <00:15:25.620>the <00:15:25.795>mobile <00:15:25.970>provider, <00:15:26.145>the,

346
00:15:27.845 --> 00:15:30.005
<00:15:27.845>the <00:15:28.045>telcos, <00:15:28.245>they <00:15:28.445>know <00:15:28.645>everything <00:15:28.845>about <00:15:29.045>you, <00:15:29.245>right?

347
00:15:30.145 --> 00:15:32.965
<00:15:30.145>So <00:15:30.272>when <00:15:30.399>you <00:15:30.526>link <00:15:30.654>the, <00:15:30.781>the <00:15:30.908>sim <00:15:31.035>swap <00:15:31.163>with <00:15:31.290>your <00:15:31.417>phone <00:15:31.545>number,

348
00:15:33.715 --> 00:15:36.765
<00:15:33.715>that <00:15:33.915>timestamp <00:15:34.115>is <00:15:34.315>registered <00:15:34.515>in <00:15:34.715>the <00:15:34.915>Deutsche <00:15:35.115>Telecom,

349
00:15:36.865 --> 00:15:38.205
<00:15:36.865>all <00:15:37.106>two <00:15:37.347>whatever <00:15:37.588>you <00:15:37.829>use, <00:15:38.071>right?

350
00:15:38.505 --> 00:15:41.845
<00:15:38.505>So <00:15:38.660>basically <00:15:38.816>the <00:15:38.971>idea <00:15:39.127>of <00:15:39.282>these <00:15:39.438>APIs <00:15:39.593>are <00:15:39.749>telcos <00:15:39.905>opening

351
00:15:41.845 --> 00:15:43.045
<00:15:41.845>that <00:15:42.205>technology <00:15:42.564>for <00:15:42.925>people.

352
00:15:43.515 --> 00:15:44.525
<00:15:43.515>That <00:15:43.666>is <00:15:43.818>the, <00:15:43.969>that <00:15:44.121>is <00:15:44.272>the <00:15:44.424>idea.

353
00:15:46.875 --> 00:15:48.365
<00:15:46.875>Okay? <00:15:47.210>So <00:15:47.545>yeah, <00:15:47.880>that's <00:15:48.216>it.

354
00:15:48.545 --> 00:15:50.125
<00:15:48.545>No <00:15:48.745>more <00:15:48.944>questions. <00:15:49.145>So <00:15:49.344>thank <00:15:49.545>you <00:15:49.745>very <00:15:49.944>much.

355
00:15:50.365 --> 00:15:52.045
<00:15:50.365>I <00:15:50.520>will <00:15:50.676>be <00:15:50.831>around <00:15:50.987>if <00:15:51.142>you <00:15:51.298>have <00:15:51.453>any <00:15:51.609>other <00:15:51.765>question.

356
00:15:52.425 --> 00:15:55.405
<00:15:52.425>And <00:15:52.580>we <00:15:52.736>have <00:15:52.891>the <00:15:53.047>one <00:15:53.202>on <00:15:53.358>the <00:15:53.513>only <00:15:53.669>ratio <00:15:53.824>over

357
00:15:55.405 --> 00:15:56.605
<00:15:55.405>there <00:15:55.765>with <00:15:56.125>a <00:15:56.485>kirin.

358
00:15:56.705 --> 00:15:58.885
<00:15:56.705>So <00:15:56.905>if <00:15:57.105>you <00:15:57.305>want <00:15:57.505>get <00:15:57.705>a <00:15:57.905>secret <00:15:58.105>kirin,

359
00:15:58.885 --> 00:16:00.285
<00:15:58.885>you <00:15:59.137>can <00:15:59.389>get <00:15:59.641>your <00:15:59.893>badge <00:16:00.145>scanned.

360
00:16:00.465 --> 00:16:02.805
<00:16:00.465>So <00:16:00.605>feel <00:16:00.745>free <00:16:00.885>to <00:16:01.025>reach <00:16:01.165>out. <00:16:01.305>Thank <00:16:01.445>you <00:16:01.585>very <00:16:01.725>much. <00:16:01.865>Thanks.