News for hackers. Stuff that matters.
Re:atproto and the ownership of identity by dom96 on Sunday January 19, 2025 @04:45AM (#42755548)
How often does something like this happen? In that scenario there are a number of options though, one of which is just putting a banner on accounts that are impacted.
Re:atproto and the ownership of identity by lxgr on Sunday January 19, 2025 @02:09PM (#42760466)
More often than you might think. The EU COVID-19 immunology status certificate scheme saw some fraudulent issuances, for example.

And "putting a banner on impacted accounts" both partially deanonymizes and effectively bans legitimate users for no fault of their own.

Travel documents are not a digital identity scheme, and using the ICAO biometric travel document scheme contrary to its explicit design goals is just asking for trouble.