Collaborate Disseminate
tl;dr: I have switched phone and operating system: Android 8.0 –> Android 10.0. Phone restored from backup, so all the remaining is the same except for Microsoft Authenticator that now requires fingerprint scan. Does this truly increas… Continue reading Does fingerprint scanning on Microsoft Authenticator increase security?
We have an application that allows users to login using fingerprint. The server validating the sent fingerprint. Now, anyone can watch the traffic and resend them. What the best way to prevent this from happening? Should we add captcha whe… Continue reading Prevent Replay Attack When using FingerPrint as login
I am wondering how those RSA fingerprints work. I have a GitHub account and created an RSA key pair to set up an ssh connection. Then followed the instruction…
First time I connect to my GitHub it gives me and RSA fingerprint SHA256:nThb… Continue reading Fingerprints of a RSA keys – GitHub not matching?
Today I switched ON the "Responsive Design Mode" under the "Web Developer" Section of the Firefox menu, and from the dropdown menu selected "iPhone X/XS iOS 12".
So now every webpage I visited was being sent t… Continue reading Effect of Firefox’s "Responsive Design Mode" on the browser’s fingerprint
Usual password authentication systems do not store passwords directly on the server, but only hashes of those passwords.
Why do fingerprint authentication systems not offer this possibility?
Continue reading Why don’t fingerprint authentication systems don’t store ‘hashes’?
If a user scan his fingerprint, and this fingerprint (let’s say a [x,y] image) is hashed and then sent to a server that stores this hash, is the fingerprint scan susceptible to either dictionary attack or pass-the-hash attack?
Let’s assume an insecure communication channel.
Alice makes a public key (we assume is PGP, but any asymmetric crypto could be used unless it doesn’t have fingerprints for checking) and sends it to Bob.
Then, Alice sends to Bob a photo of … Continue reading Can we check fingerprint with photos?
You can see that the two fingerprints differ, the second(nThbg6…) is the legit that can be found here:
https://help.github.com/en/github/authenticating-to-github/githubs-ssh-key-fingerprints
I couldn’t find anything about the first(Pczi… Continue reading SSH fingerprints(GitHub) differ when connecting to different routers
Biometrics — like using your fingerprint as a password — is certainly convenient and are pretty commonplace on phones and laptops these days. While their overall security could be a problem, they certainly fit the bill to keep casual intruders out of your system. [Lewis Barclay] had some sensors gathering …read more
Some services, like https://2ip.io/privacy/, are able to detect (correctly) OpenVPN and its settings. For example, in my case: OpenVPN, AES, MAC is SHA512.
How VPN fingerprinting works? I thought the only clue is the MTU, but I have reall… Continue reading Evade VPN fingerprinting