2FA, WTF? at PyCon Singapore

8ec1383b240b5ba15ffb9743fceb3c0e?s=47 Phil Nash
October 11, 2019

2FA, WTF? at PyCon Singapore

Everyone is hacking everything. Everything is vulnerable. Your site, your users, even you. Are you worried about this? You should be!

Don't worry, I'm not trying to scare you (that much). We have plenty of safeguards against attempts on our applications' user data. We all (hopefully) recognise Two Factor Auth as one of those safeguards, but what actually goes on under the hood of 2FA?

We'll take a look into generating one time passwords, implementing 2FA in Python web applications and the only real life compelling use case for QR codes. Together, we'll make the web a more secure place.



2FA with Authy in Django: https://www.twilio.com/docs/authy/quickstart/two-factor-authentication-python-django
2FA with Authy in Flask: https://www.twilio.com/docs/authy/tutorials/two-factor-authentication-python-flask

PyOTP: https://github.com/pyauth/pyotp
Django OTP: https://github.com/django-otp/django-otp


Phil Nash

October 11, 2019