Authentication Pitfalls: More than just Passwords

Authentication is hard. Learn why relying on "SMS 2FA" is dangerous (SIM Swapping), how to test for "Password Reset Poisoning" via Host Header Injection, and why allowing unlimited login attempts is a gift to botnets.