Latest / Identity at the Center / #320 - Authenticate 204 - FIDO Feud

Transcript

#320 - Authenticate 204 - FIDO Feud · Identity at the Center

• 0:05
  This is identity at the center if it has anything to do with
• 0:10
  IAM. This is the go to podcast now
• 0:15
  your hosts Jim McDonald and Jeff Stedman.
• 0:22
  Welcome to the Fido feud. Thank you very much.
• 0:28
  So I'm going to give buy us a little bit of time while we're
• 0:30
  getting the stage set up here. This is a game show that's all
• 0:33
  about digital identity. It doesn't have anything to do
• 0:37
  with feuding families. So if you're looking to
• 0:40
  litigate, please look elsewhere. My name is Jeff Steadman, I'm
• 0:44
  the host of the Identity of Center podcast.
• 0:46
  I'm also going to be your host for the inaugural Fido feud.
• 0:49
  So hopefully this goes well and we come back again next year.
• 0:52
  If it doesn't, then you won't see that again.
• 0:56
  We're going to have some fun up here.
• 0:58
  We're going to kick off the Expo and the reception a little bit,
• 1:01
  but first we're going to do this.
• 1:02
  You can see we've got some buzzers being set up, we've got
• 1:05
  surveys, we've got a very charismatic host skilled at
• 1:10
  Winnie banter. So any resemblance to any other
• 1:14
  similarly named game shows is purely coincidental.
• 1:18
  So with that, let me get my team captains up here.
• 1:21
  Let me introduce Megan Seamus from the Fido Alliance and my Co
• 1:28
  host on the Identity of the Center podcast, Jim McDonald.
• 1:35
  All right, so Megan's already bringing the swag.
• 1:37
  See that here. All right Megan, yes, thanks for
• 1:44
  being on the 1st Fido feud. Tell me about your team name.
• 1:49
  My team name is the Glitterati. OK, all right, we got some
• 1:54
  glitterati fans out there. And Jim, how about your team
• 1:56
  name? 1st I got to say Steve, you look
• 1:59
  different on TV. Little bit shorter and with less
• 2:03
  mustache, that's for sure. What's your team name?
• 2:07
  Jim, We. Are the identity friends?
• 2:09
  The identity friends you. Could say identity friends at
• 2:11
  the center I was. Going to say that was a missed
• 2:13
  opportunity to promote the podcast.
• 2:15
  IDC podcast.com, like and subscribe.
• 2:18
  OK, so why don't we go ahead and get some random team members,
• 2:22
  totally random from the crowd. I'm going to come up here.
• 2:26
  I think I'm supposed to hit a slide, but I'm not sure.
• 2:29
  Let's see if that worked. No.
• 2:32
  Are there slides? There we go.
• 2:34
  OK, so Jim's team and Megan's team.
• 2:37
  Pam, Ian, Teresa, Shane, Jamie, Christian.
• 2:42
  Come up and join your team captain, please.
• 2:46
  All right, while we're getting set up here, let's go over the
• 2:49
  rules. So we surveyed the Fido
• 2:52
  Authenticate audience, that's you guys, asked a bunch of
• 2:56
  digital identity questions and got those answers back.
• 2:59
  We're going to have the top answers on the board.
• 3:02
  Each team's going to have a buzzer that they're going to be
• 3:04
  able to. OK, let's switch sides.
• 3:09
  Yes, go back on that side. All right, little stage
• 3:12
  direction. So we're good.
• 3:14
  All right, Megan, your team goes on the other side.
• 3:17
  All right, we want, we want symmetry, folks.
• 3:19
  All right, so you're going to get chance to buzz in with the
• 3:21
  answer. If you get 3 wrong answers, the
• 3:23
  other team's going to have a chance to steal and take all the
• 3:25
  points on the board. Whoever has the most points at
• 3:28
  the end, wow, we've got props coming up their shots.
• 3:31
  I mean, come on. Is this the best session of the
• 3:33
  day or what? All right, there will be some
• 3:40
  judges in the back to help with the answers.
• 3:42
  And if you don't like the answers that you see, you have
• 3:46
  only yourself to blame. These are your answers.
• 3:50
  You came up with them. Please do not take it out on me
• 3:53
  or anyone else up on stage. OK, so I think we've got totally
• 3:58
  random how all these people with shirts matching came up all at
• 4:02
  the same time. That's interesting.
• 4:03
  I've never met these people before.
• 4:04
  Never met these people before. OK.
• 4:07
  All right. So team glitterati, you guys
• 4:09
  ready? Yeah.
• 4:11
  OK. All right.
• 4:12
  We're ready. You guys are ready.
• 4:14
  Audience, you guys ready? All right, OK, question #1 give
• 4:22
  an example of a password that's easy to guess.
• 4:27
  All right, Looks like literati got it.
• 4:29
  Can. I have the bike password.
• 4:33
  Password is password up on the screen #2 So Jim, you've got a
• 4:40
  chance here if you can get the number one answer.
• 4:43
  What give an example of a password that's easy to guess.
• 4:47
  Admin. Admin is admin up on the board?
• 4:52
  We're doing we're doing shots. Do you guys want to pass or
• 4:56
  play? We would like to play Jeff.
• 4:59
  You want to play OK, we're. Supposed to.
• 5:02
  Do this now. There's shots being poured.
• 5:03
  I'm not sure how this is going to work, but Christian and All
• 5:08
  right, all right, let's get you're going to go.
• 5:12
  OK, so give me an example of a password that's easy to guess.
• 5:18
  Pet's name, a pet's name. Is that on the list?
• 5:21
  Show me pet's name. No.
• 5:23
  OK, you're doing a shot back of the line for you.
• 5:28
  Who's next? Let's go with Andrew.
• 5:35
  Andrew. OK.
• 5:38
  So, Andrew. Oh, OK, shocking that that's not
• 5:43
  a popular password, but sorry, Mr. Shakira, where you are.
• 5:47
  All right, who's next? Christian ABC123ABC123.
• 5:54
  Is that up on the list? Oh, OK, you're still alive.
• 5:58
  We got still 3 answers left on Megan.
• 6:01
  We're back to you. Give an example of a password
• 6:03
  that's easy to guess. Cordy.
• 6:10
  QWERTY. OK, so top row there on the
• 6:13
  keyboard is QWERTY on the list? It is.
• 6:18
  All right, we got 2 answers left.
• 6:20
  Who's next? Hey, there's no.
• 6:25
  Yeah, here we go. Give an example of a password
• 6:27
  that's easy to guess. No.
• 6:32
  ASDFGASDFG. OK, very random.
• 6:37
  Is a SDFG up there? No.
• 6:40
  OK, all right, I done it. Friends, you've got a chance to
• 6:44
  steal, so give an example of a password that's easy to guess.
• 6:47
  If it's up there, you take the round you have.
• 6:50
  To spread out. Birthday.
• 6:51
  Birthday. Is birthday on the list?
• 6:55
  No. All right, so the glitterati
• 6:59
  take the round. Let's see number six.
• 7:01
  Show me #6 let me in. OK?
• 7:07
  And #1 123456 OK, All right. So I think we're hopefully
• 7:16
  getting a feeling of how this is going to go here.
• 7:19
  I see shots board over here and I don't know what if we're the
• 7:23
  losers, take the shots, OK? We'll move those out of the way
• 7:25
  for now, OK? Tell them we did or this is a
• 7:28
  real survey. So again, these are answers from
• 7:32
  the survey that you answered, and we took your answers and put
• 7:36
  them up here. OK, question #2 what trend are
• 7:41
  you most tired of in the identity and access management
• 7:44
  space? That was quick on a draw,
• 7:47
  glitterati. Can I ask the audience?
• 7:52
  No. Oh, that's cool.
• 7:55
  This is the wrong game show for that.
• 7:57
  We'll have to try that next time.
• 8:00
  Account recovery. Account recovery, is that a
• 8:03
  trend that we're tired of in identity and access management
• 8:06
  space? No, it's a.
• 8:13
  Very applicable sound effect. No, I will say decentralized
• 8:18
  identity. Decentralized identity.
• 8:21
  OK. Is that a trend that we're tired
• 8:23
  of? No.
• 8:25
  OK, we're going to go down the line then.
• 8:28
  Zero trust. Zero trust.
• 8:30
  OK, that's a crowd favorite, apparently.
• 8:32
  Is zero trust a trend that we're tired of?
• 8:35
  There it is number one. OK, Zanker glitterati, you guys
• 8:40
  are on the board. Do you guys want to pass or
• 8:42
  play? We're going to pass.
• 8:45
  We're going to pass. OK all right because you you're
• 8:49
  not identity friends. She she's going to cover from
• 8:52
  the shot here. All right.
• 8:53
  What trend are you most tired of in the identity and axis
• 8:56
  management space IT. Dr. ITDR Identity Threat
• 9:02
  Detection and Response. Is that on the list?
• 9:05
  No. OK, Teresa, what's a trend
• 9:08
  you're tired of? Password reset.
• 9:11
  Password resets. We're tired of password resets.
• 9:14
  We're at a conference all about passkey, so it makes sense.
• 9:16
  Let's see. Is that on the board?
• 9:18
  Password resets? No.
• 9:20
  All right, Jim, you got 2 strikes. 3 strikes and you're
• 9:23
  out. I know you like the baseball
• 9:25
  analogies, So what trend are you most tired of in identity and
• 9:29
  access management? I'm thinking.
• 9:32
  AIAI OK artificial intelligence, is that on the list?
• 9:37
  It is OK, you guys are still alive.
• 9:41
  You have 3 Lancers left. You already have two strikes, so
• 9:45
  the next wrong 1 is going to go back to the other side.
• 9:48
  Pam, what trend are you most tired of in identity and access
• 9:51
  management looking for? Help help me, help me somebody
• 9:59
  help me I'm going to say OK I'm going to try a different but
• 10:07
  same idea your. Audience here.
• 10:08
  Let's try. Hey, no heckling.
• 10:12
  Oh wait, no Heckle. We'll try wallets.
• 10:15
  Wallets like a password wallet or like an identity wallet of
• 10:20
  some sort? OK, Wallet is wallet up on the
• 10:22
  list? No.
• 10:24
  OK. All right, so glitterati, you've
• 10:28
  got a chance to steal. Give me a trend that you're most
• 10:31
  tired of in the identity access management space.
• 10:33
  Megan, you're the team captain, so you got to make the decision.
• 10:37
  Password list. Password list.
• 10:39
  Wow. OK, that's a bold statement at a
• 10:41
  password list conference. So let's see his password list
• 10:45
  on this. On the list.
• 10:47
  No. All right, identity friends,
• 10:50
  you're on the board. You got some points.
• 10:51
  Let's see. What else are we tired of?
• 10:53
  Show me #4 passwords. OK.
• 10:57
  All right, show me #3 MFA and biometrics, OK?
• 11:06
  And then #2 Fido and passkeys. OK, Andrew, where is is is Mr.
• 11:14
  Shiki are in the audience. Where?
• 11:15
  OK, He's waving. I'm very sorry.
• 11:19
  If you want to like, you know, yell at people around you,
• 11:22
  Remember, the answers came from out there, not over here.
• 11:25
  I have a. Thing.
• 11:26
  To say. OK, I have a thing to say to the
• 11:28
  judges in the back. I'm pretty sure password list
• 11:29
  is. This should fit in the pass keys
• 11:31
  category, but that's fine David. It's rigged.
• 11:36
  It's rigged. OK, there's already drama and
• 11:38
  controversy at the first ever Fido feud, so I'm not sure how
• 11:42
  we're going to recover, but let's keep moving.
• 11:44
  We've got, oh, Ian, too cool for the room.
• 11:48
  All right, third question. Here we go.
• 11:51
  Name a metric used to measure the effectiveness of an IM
• 11:56
  program. I think it I I saw you do it.
• 12:00
  Yes. OK, we'll go with you.
• 12:03
  Yes. Next year's budget we'll have.
• 12:04
  But. Oh, there we go.
• 12:05
  All right. Only a little bit of a delay.
• 12:07
  So there we go. Ian, what is the answer?
• 12:16
  Yeah, sure, sure, sure. Good.
• 12:19
  You pressed a button. Good job.
• 12:22
  Successful logins. Successful logins.
• 12:25
  Is successful logins on the list?
• 12:28
  It is number one. All right, so do you guys want
• 12:32
  to pass or play? We're going to play that one.
• 12:35
  OK. All right, Teresa, you're up.
• 12:38
  Name a metric used to measure the effectiveness of an IM
• 12:41
  program. Password reset again.
• 12:47
  Password reset. So password resets is password
• 12:53
  resets on the list? It is OK reduce resets.
• 12:57
  All right Jim, we got a clean board here. 4 answers.
• 13:00
  Name of metric used to measure the effectiveness of an IAM
• 13:03
  program. User satisfaction.
• 13:06
  User satisfaction. Are are your users happy with
• 13:11
  your IAM program? Is that on the list?
• 13:14
  User satisfaction? It is number 2.
• 13:17
  All right, we're going to go back down here to Pam name a
• 13:20
  metric used to measure the effectiveness of an IM program
• 13:25
  number of. Breaches.
• 13:26
  Number of breaches. So this is a number you want to
• 13:29
  be very small. So number of breaches, is that
• 13:32
  on the list? No, it was even a even a bad
• 13:38
  sound effect for that one. All right, Ian, give me another
• 13:41
  metric used to measure effectiveness of an IM program
• 13:44
  enrollment like new user sign up, new user sign up enrollment.
• 13:47
  So like for MFA enrollment or something like that or OK, so
• 13:51
  MFA enrollments or something along those lines.
• 13:55
  All right, 2 answers left. Let's see, Teresa, we're back to
• 13:59
  you name of metric used to measure the effectiveness of an
• 14:02
  IM program, the. Abandoned rate.
• 14:05
  Abandoned rate OK is abandoned rate on the list?
• 14:09
  Judges are thinking about it and no, not on the list.
• 14:15
  Jim, it always comes down to you, you know, 2 strikes.
• 14:19
  Can you, can you bail things out here?
• 14:21
  If you get this wrong, it's going to go over to the
• 14:23
  glitterati who are there powwowing with their cool
• 14:25
  sunglasses and green shirts and all their swag.
• 14:28
  Nanometric used to measure the effectiveness of an IM program.
• 14:33
  Account lockouts. Account lockouts.
• 14:36
  OK, so how effective is your program?
• 14:39
  Account lockouts? Is account lockouts not on the
• 14:43
  list? All right, so we're going to go
• 14:45
  over here to the glitterati. Give me a metric that's used to
• 14:49
  measure the effectiveness of an IM program.
• 14:53
  Sign in speed. Sign in speed.
• 14:55
  So how quickly you can log in. OK, sign in speed is sign in
• 15:00
  speed on the list? It is time to response.
• 15:04
  So glitterati is going to take that one.
• 15:06
  Let's see what was number six Secure practices.
• 15:12
  OK, I, I'm, I'm, I'm just, I'm just the messenger folks, that's
• 15:18
  all. OK, all right, let's go.
• 15:21
  We've got one more question. Here we go.
• 15:24
  So let's pull the next person up.
• 15:27
  We got Christian versus Teresa. No pressure, guys.
• 15:30
  This is the last one we've got. He's just going to do the shot.
• 15:33
  He's already either conceded or he's got some other problems.
• 15:35
  So the biggest here we go number question.
• 15:42
  All right, last question for the game.
• 15:44
  The biggest threat to I am in the future will be Blank.
• 15:49
  You guys even let me finish the question.
• 15:52
  OK, we'll be Blank. Who got it.
• 15:57
  Generative AI. Generative AI is going to be the
• 16:02
  biggest blank for hacking into systems and demanding a ransom
• 16:07
  of unlimited cat memes. OK, well, yeah, it cut off
• 16:11
  there, but it is cat memes, so just FYI.
• 16:13
  All right, is AI on the list? It is number 2.
• 16:18
  Teresa, you got a chance to steal.
• 16:20
  The biggest threat to I in the future will be what?
• 16:22
  Hacking into systems and demanding a ransom of unlimited
• 16:26
  cat memes. Social engineering.
• 16:30
  Social Engineering. Social engineering.
• 16:33
  OK, that's common today. Let's see, is it still going to
• 16:36
  be common in the future? What do we think?
• 16:38
  Social engineering is not on the list.
• 16:41
  OK, glitterati, you've got a chance here.
• 16:43
  Do you want to pass or play? You want to play?
• 16:49
  OK, All right. There seems to be some
• 16:50
  confusion, but we're going to go for it, all right?
• 16:53
  The biggest threat to I am in the future will be what?
• 16:56
  Hacking into systems and demanding demanding a ransom of
• 17:00
  cat memes. Nigerians.
• 17:04
  Nigerians OK, apologies to all of Nigeria as part of that
• 17:10
  answer, but let's see. And if you're a Prince AA
• 17:13
  policy, I'm happy to bring your money into the US for you.
• 17:17
  So is Nigerians on the list? Government entities?
• 17:22
  OK, All right, The judges have spoken and they have said that
• 17:27
  Nigeria is a government and we're going to allow it.
• 17:30
  OK. All right, The biggest threat to
• 17:32
  I am in the future will be what? Hacking into systems and
• 17:35
  demanding a ransom of unlimited cat memes.
• 17:38
  Criminals. Criminals.
• 17:40
  OK, and that's different from government entities, right?
• 17:43
  OK, just double checking there. OK, so are criminals up on the
• 17:47
  board? It is hackers APT advanced
• 17:51
  persistence threats. All right, who's next?
• 17:56
  The biggest threat to I am in the future will be what?
• 17:58
  Hacking into systems and demanding a ransom of unlimited
• 18:01
  cat memes. Next deal.
• 18:07
  Nick Steele, Nick. Steele.
• 18:08
  Nick Steele. OK, I don't know who you're
• 18:11
  going to have to explain to me. What is Nick Steele?
• 18:13
  A person. A person.
• 18:15
  OK, if you're Nick Steele, are you on the board?
• 18:21
  A celebrity. OK, All right, so now we've got
• 18:26
  to watch out for celebrities hacking his house for the
• 18:28
  future, apparently. All right, you got one answer
• 18:31
  left on the board. Let's see who's next here.
• 18:35
  Christians, back to you. I think the biggest threat to I
• 18:38
  am in the future will be what? Hacking into systems and
• 18:41
  demanding a ransom of unlimited cat memes.
• 18:44
  Teenagers. Teenagers.
• 18:47
  OK, are teenagers on the list? No.
• 18:52
  OK, you still got 2 strikes. We can keep going.
• 18:55
  So we're going back around are. You sure I can't ask the
• 18:58
  audience we're going to go with? We've already had bots and you
• 19:05
  said children. They just said what demographic
• 19:09
  does that leave dude cover? Nigeria, Yeah, yeah.
• 19:13
  Yeah, Oh my goodness. IoT devices.
• 19:20
  IoT devices. So our devices are going to hack
• 19:23
  ourselves as IoT devices on the list.
• 19:26
  Judges No. OK, two strikes left Jamie, it's
• 19:32
  up to you Biggest threat to I am in the future will be what
• 19:37
  hacking into systems and demanding a ransom of unlimited
• 19:39
  cat memes. She said she's stressed out.
• 19:42
  We're we're trying to you know, goose Frappa.
• 19:45
  Let's be calm. Let's think about it here for a
• 19:47
  second. The future.
• 19:48
  What is what are these people? Look, look at this guy right
• 19:50
  here. What do you think he thought is
• 19:53
  going to hack us in the future? Celebrity, don't do that.
• 20:01
  Oh, so just so she said Andrew. And then Jamie said he's not a
• 20:06
  celebrity. Sorry, Andrew.
• 20:10
  Oh, no, no. Megan said that.
• 20:11
  Sorry. Yeah.
• 20:12
  Right. OK.
• 20:13
  All right. We need an answer.
• 20:14
  Biggest threats I am in the future will be what?
• 20:16
  Hacking into systems and demanding a ransom of unlimited
• 20:19
  cat memes? Yeah.
• 20:21
  Yeah. Big tech.
• 20:24
  Big tech. OK, so if you're big tech, you
• 20:28
  know, like a like a Google maybe or an IBM or something like
• 20:32
  that, are you on the list? Big tech?
• 20:35
  No. OK, all right.
• 20:39
  You guys have a chance to steal. There's one answer left on the
• 20:41
  board. The biggest threat to I am the
• 20:44
  future will be what? Hacking into systems and
• 20:47
  demanding a ransom of unlimited cat memes?
• 20:49
  Jim. Unlimited cat?
• 20:50
  We have to think Hello Kitty. Hello Kitty wants their cat
• 20:56
  memes back and they're going to hack the planet essentially to
• 21:00
  get that back. OK all right, so Hello Kitty was
• 21:03
  the answer. Is that on the board animals.
• 21:09
  OK judges judges have have deemed that that's appropriate.
• 21:13
  So points are going to go over to the identity friends.
• 21:16
  It was a close game, but the winner is actually still
• 21:20
  glitterati, the first ever Fido Alliance.
• 21:25
  I've got some prizes for you, the tiniest awards ever.
• 21:30
  So here's one for everyone on the team.
• 21:32
  So you might have to come closer if you want to get pictures
• 21:35
  because or zoom in right? So we've got that.
• 21:39
  So congratulations to the Glitterati team for being the
• 21:43
  first ever winner. Let's give them a round of
• 21:45
  applause. All right, thank you all for
• 21:50
  being here. Want to give a shout out to
• 21:52
  Adrian and the production crew for helping make all this
• 21:55
  possible. If you like this, submit the
• 21:58
  feedback so you can hopefully see us next year with better
• 22:01
  buzzers and hopefully better answers from some of our
• 22:04
  teammates. So with that, we've got the Expo
• 22:07
  and the reception kicking off. We'll see you out there.
• 22:09
  Thank you everybody. You've been listening to
• 22:22
  Identity at the Center. We hope you've enjoyed the show.
• 22:26
  Make sure to like, rate and review, and we'll be back soon.
• 22:30
  But in the meantime, hit the website at
• 22:32
  identity@thecenter.com. See you next time on Identity at
• 22:39
  the Center.