News for hackers. Stuff that matters.

eaglemfo

Re:The "email is authentication" pattern on Saturday September 07, 2024 @07:42PM (#41477141)
I wish sites would acknowledge the need for a nerd mode that gets rid of all the stuff that annoys nerds and is essentially password or lockout, no resets. Enable reset methods or 2fa at your own whim.

For the rest you can do weird stuff that doesn't work on nerds.

Re:The "email is authentication" pattern on Saturday September 07, 2024 @07:29PM (#41477084)
The german gov ids actually have a way to issue pseudonymous tokens where websites can only see that you are the same person as last time. You can't make 2 accounts on the same site if sich things are unwanted. You can't link accounts across providers.

How it works under the hood? No specific idea. I wonder if its sound.

Re:The "email is authentication" pattern on Saturday September 07, 2024 @07:27PM (#41477077)
Wasn't there a recent sidechannel attack on Infineon cryptography chips? The EU passports likely use the Infineon chips.