Reverse of DPAPI - BlackHat DC 2010
Malware
UI Redressing
13 Security Testing
Secrets, Lies, and Account Recovery: Lessons from the Use of Personal Knowledge Questions at Google
Dialing Back Abuse on Phone Verified Accounts - CCS 2014
An Analysis of Private Browsing Modes in Modern Browsers