Fantastic Clear-Text Passwords and Where to Collect Them

Explore the critical security vulnerabilities surrounding clear-text password storage and transmission in this 28-minute conference talk from BSidesMunich. Learn about the various locations and methods where attackers can intercept unencrypted passwords, including network traffic analysis, database breaches, log files, and application vulnerabilities. Discover common scenarios where passwords are inadvertently stored or transmitted in plain text, understand the risks associated with these practices, and examine real-world examples of password collection techniques used by security researchers and malicious actors. Gain insights into proper password handling mechanisms, encryption standards, and security best practices to prevent credential exposure. Master the fundamentals of secure authentication systems and understand why clear-text password storage remains one of the most dangerous security anti-patterns in modern applications.