{"guid":"7e18fdcb-2aa3-54a3-8610-08189739b701","title":"Passwort-Policies, Anmeldung per Mail-Token und weitere Verbrechen","subtitle":null,"slug":"2026-726-passwort-policies-anmeldung-per-mail-token-und-weitere-verbrechen","link":"https://talks.mrmcd.net/2026/talk/NZUGAU/","description":"Wie die meisten Wesen, die sich im Internet bewegen, werde auch ich regelmäßig mit verschiedensten Login-Methoden konfrontiert. Dieser Talk beschäftigt sich mit gängigen, skurilen, sicheren und unsicheren Ausprägungen dieser.\n\nOb Passwort, FIDO, OTP oder Name des ersten Haustiers. Die meisten von uns werden regelmäßig mit einer Vielzahl verschiedenster Login-Methoden konfrontiert. Weil mich einige davon in letzter Zeit disproportional genervt haben, habe ich beschlossen mich damit zu beschäftigen was die Vor- und Nachteile verschiedener Logins sind, ob bestimmte best-practices noch zeitgemäß sind und wie das BSI und die CISA das eigentlich sehen.\n\nhttps://creativecommons.org/licenses/by-sa/4.0/","original_language":"deu","persons":["j0nas"],"view_count":845,"promoted":true,"date":"2026-09-11T19:20:00.000+02:00","release_date":"2026-09-12T00:00:00.000+02:00","updated_at":"2026-09-18T21:15:06.714+02:00","tags":["NZUGAU","2026","mrmcd26","Security","Freiraum - C120","mrmcd26-deu","Darmstadt","mrmcd26","Day 1"],"length":3048,"duration":3048,"thumb_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd26/726-7e18fdcb-2aa3-54a3-8610-08189739b701.jpg","poster_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd26/726-7e18fdcb-2aa3-54a3-8610-08189739b701_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd26/726-7e18fdcb-2aa3-54a3-8610-08189739b701.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd26/726-7e18fdcb-2aa3-54a3-8610-08189739b701.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/2026-726-passwort-policies-anmeldung-per-mail-token-und-weitere-verbrechen","url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_title":"MRMCD 2026 - Grenzen Überwinden","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26","related":[],"recordings":[{"length":3048,"mime_type":"video/mp4","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-12T11:46:39.602+02:00","label":"deu 1080p","size":324,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/h264-hd/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_hd.mp4","url":"https://api.media.ccc.de/public/recordings/104337","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"audio/opus","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-12T11:46:54.034+02:00","label":"deu","size":29,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/opus/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_opus.opus","url":"https://api.media.ccc.de/public/recordings/104338","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"audio/mpeg","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-12T11:46:58.196+02:00","label":"deu","size":47,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/mp3/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/104339","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"video/mp4","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-12T11:48:52.845+02:00","label":"deu 576p","size":108,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/h264-sd/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_sd.mp4","url":"https://api.media.ccc.de/public/recordings/104344","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-12T12:16:02.357+02:00","label":"deu 1080p","size":261,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/av1-hd/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/104358","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"video/webm","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-12T13:42:18.543+02:00","label":"deu 576p","size":114,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/webm-sd/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/104383","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"},{"length":3048,"mime_type":"video/webm","language":"deu","filename":"mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-12T14:13:55.618+02:00","label":"deu 1080p","size":316,"recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd26/webm-hd/mrmcd26-726-deu-Passwort-Policies_Anmeldung_per_Mail-Token_und_weitere_Verbrechen_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/104393","event_url":"https://api.media.ccc.de/public/events/7e18fdcb-2aa3-54a3-8610-08189739b701","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd26"}]}