Questions tagged [identity]
Identity is the property of an object which allows it to be uniquely specified.
241 questions
1 vote
1 answer
92 views
Risks from sharing screen recording of mobile Australia licence
A Swiss Unicorn scanning software company is asking for a screen recording of my digital driving licence via UpWorks a freelance marketplace. They're using Aphaia as outsourced DPO. What are the risks ...
- 121
3 votes
2 answers
558 views
In practice, what are the identities in the Needham–Schroeder protocol?
In the Needham–Schroeder public-key protocol we have the identities A and B of Alice and Bob, respectively. The initial version of the protocol was vulnerable to a MitM attack where the fix consists ...
- 709
0 votes
0 answers
117 views
Is refresh token in SPA+BFF (confidential client) necessary?
I'm writing system which is SPA+BFF+Backend. The BFF is a confidential client. Is responsibe for Authentication and stores AccessToken in Redis. To the browser only goes generated ID of the token in ...
- 101
1 vote
1 answer
198 views
Prove The Identity of Author Using GPG On Demand
Given a situation where I want to be anonymous by default, how can I use GPG to prove that I'm the original author once, on-demand, and for a specific user?
- 113
0 votes
1 answer
139 views
Using fingerprints everywhere to identify at physical, ID required, places
I was wondering why people can't just use fingerprints to retrieve all necessary documents where required. What would be the problem with such form of authentication, which could be used via ...
8 votes
5 answers
6k views
Are SHA-256 hashes of user emails guaranteed to be unique?
I'm working on a website that will require users to insert a valid email address, which will work as their unique user id. This email will not be used for communicating with the user, it is only ever ...
- 553
1 vote
1 answer
216 views
What are the security risks of only using an id in the url to protect the content?
I'm building a note-taking app, when a user writes a note an id is generated and I redirect them to a page where they can see its content with a URL like /note/DXSt832pS5iLuos6uxBn. What are the ...
- 123
1 vote
1 answer
180 views
How can websites fingerprint the company I work for?
During my work day, I came upon a website that had a popup that identified the company I work for(basically saying "contact us X company"). This website was never previously visited, cookies ...
- 11