News for hackers. Stuff that matters.
Re:WeChat permanently closes account after user sets offensi... by ufmace on Friday June 05, 2020 @02:55PM (#23432380)
Dude what? I don't think anybody uses that. I've never heard of it before. Just because somebody created a thing doesn't mean it's safe or secure or that we should all switch to it before it gets some solid testing and validation under its belt.

I don't see any plugins or libraries to add to any of the huge number of exiting authentication libraries. Has it even been subject to a hostile security audit? Has it been put in a place where it will face a serious state-sponsored attack and performed at least as well as existing systems?

Re:WeChat permanently closes account after user sets offensi... by tomato2juice on Friday June 05, 2020 @05:15PM (#23434054)
> Dude what? I don't think anybody uses that. I've never heard of it before.

Ya, the first time I heard of it I had the same reaction, but it's legitimate.

https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco... That page is quite old, but lots of bodies use it: http://srp.stanford.edu/links.html

Amazon uses it in a service: https://docs.aws.amazon.com/cognito/latest/developerguide/am...

Also, as another commenter said, Apple uses it in Homekit.