World Congress 2024 • Aug 20, 2024 • Session details

No More Post-its: Boost your login security with APIs

Are your users still relying on sticky notes for security? Learn how to replace vulnerable passwords with powerful API integrations like silent authentication and facial liveness detection.

Pause

Mute

Enter Fullscreen

#1 about 2 min

Understanding the rising tide of phishing and data breaches

How cyber attacks and data leaks leave static credentials vulnerable to fraud.

#2 about 3 min

Why traditional passwords fail modern application security needs

Forcing complex password patterns leads to poor user habits and predictable guessing.

#3 about 2 min

Checking compromised security credentials using a REST API

Checking a portion of a password hash prevents users from utilizing leaked credentials.

#4 about 3 min

Implementing two-factor authentication workflows with one-time passwords

Delivering one-time passwords across multiple communication channels ensures stronger proof of user identity.

#5 about 1 min

Validating user phone numbers prior to sending access codes

Checking phone number reachability and roaming state prevents sending authentication codes to unreachable devices.

#6 about 2 min

Preventing multifactor bypass through SIM swap detection mechanisms

Detecting recent SIM card changes stops malicious actors from intercepting SMS verification codes.

#7 about 2 min

Authenticating user sessions using silent network verification

Telecom network operators validate physical devices via mobile data token exchanges without explicit user input.

#8 about 2 min

Integrating biometric face liveness for physical identity checks

Comparing real-time facial scans against stored profile images provides robust biometric identity validation.

#9 about 2 min

Confirming user presence utilizing device location APIs

Retrieving device latitude and longitude coordinates verifies user geographic location during suspicious transaction attempts.

#10 about 2 min

Reviewing modern authentication workflows and telecom integrations

Combining biometric, location, and telecom checks protects application user logins against systemic identity fraud.

Matching moments

1:44 min

Securing authentication systems against SIM swapping attacks

Alex Goldman · Coffee With Developers

1:53 min

Overcoming barriers to passwordless authentication adoption

Christoph Menzel

Christoph Menzel · WWC Europe 2026

3:12 min

Layering security mechanisms with multi-factor authentication factors

Gift Egwuenu · WWC 2023

3:06 min

The vulnerability of two-factor authentication to live phishing attacks

Paweł Łukaszuk · LIVE

6:36 min

Defensive strategies against AI-driven social engineering

Wolfgang Ettlinger +1 · WWC 2023

2:35 min

Replacing web passwords with native carrier network identity

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail

almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail

almost 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail

almost 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail

almost 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail

almost 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali

World Congress 2026 North America

Designing APIs That Survive AI Agents at Scale

Phani Pendurthi

Mastercard, Principal Software Engineer

Phani Pendurthi

World Congress 2026 North America

Responsible AI Architecture with Zero Trust Agents

Ashok Prakash

Staff ML Engineer at Apple

Ashok Prakash

Related videos

MFA? Game over! Watch your protection collapse – live thumbnail

WWC Europe 2026 • about 1 month ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Going Beyond Passwords: The Future of User Authentication thumbnail

WWC 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail

WWC Europe 2026 • about 1 month ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect thumbnail

WWC Europe 2026 • about 1 month ago

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect

Alexander Schwartz

Passwordless future: WebAuthn and Passkeys in practice thumbnail

WWC 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Passwordless Web 1.5 thumbnail

LIVE • almost 2 years ago

Passwordless Web 1.5

Paweł Łukaszuk

Related articles

CH

Chris Heilmann

The top 200 passwords of 2024 can be cracked in less than a second

Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and passw...

over 1 year ago

The top 200 passwords of 2024 can be cracked in less than a second

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

From learning to earning

Jobs that call for the skills explored in this talk.

Principal Software Engineer, Identity

Expert Remote Ruby OAuth OpenID

about 1 month ago

Staff Engineer - Offensive Security

San Francisco, CA, United States

Expert $155k–194k Remote Nmap Twilio Scripting

about 1 month ago

Security Engineer

Expert Remote Twilio Service Stack Cloud Computing

Engineer, Offensive Security Organization

Delhi, NY, United States

Expert Remote Nmap Twilio Ethereal

about 1 month ago

Staff Engineer, Security Engineering Partners

Expert Remote Twilio Cloud Computing Containerization

Senior Security Engineer, Incident Response

San Francisco, CA, United States

Expert $141k–176k Remote Twilio Service Stack Cloud Computing