Collaborate Disseminate
I want to make guillou quisquater authentication for a website with Laravel (PHP). The authentication is between server and client(user). In the references i’ve read (here and here) the registration scheme is:
The server se… Continue reading Is username and password needed to register and authenticate user in zero knowledge guillou quisquater?
My Bank’s Online Banking feature doesn’t use usernames. Instead, they assigned me a digit-only account number*. To log in, I enter my number, then it brings me to a new page to prompt for my password. However on the password … Continue reading Is any security gained from bank issued usernames in this authentication flow?
On a website in which all of users’ information (line Username, Email and Phone Number) are stored safe and hidden (from other users and public world), is it bad practice to accept email address or phone number or username it… Continue reading Is it bad practice to accept phone number or email as username?
In telegram you can setup a unique public username which is available to anyone in the search option, but if you choose not to do that, the only way someone can identify you is by the name you set (ex. John Doe).
So can a ra… Continue reading Spoofing the identity of another user in Telegram
In telegram you can setup a unique public username which is available to anyone in the search option, but if you choose not to do that, the only way someone can identify you is by the name you set (ex. John Doe).
So can a ra… Continue reading Spoofing the identity of another user in Telegram
Does correcting a misspelled username and prompting the user with a valid username introduce a security risk?
I recently tried logging into facebook and misspelled my email. They prompted me with the message below.
Log … Continue reading Does correcting misspelled usernames create a security risk?
Is having a longer/more complex username considered more secure than using a shorter/basic one? Would the uniqueness of a username positively impact security?
This is assuming that adversaries aren’t aware of what the usern… Continue reading Does username length/complexity/uniqueness positively impact security?
Occasionally I will fail to hit Tab properly when entering a username/password combination. This results in me submitting username “myUsername$ecretPa$$word” along with a blank password. I always try to change my password s… Continue reading Should I be worried if I accidentally entered my password in a username field?
When sending web application users a reminder email, is it reasonably safe to include a link in the email to take them to the web application sign in form whereby the link has their username as a parameter? This is to save the user having … Continue reading Pre-filling username for access to online web application
I’ve looked around on Security.SE, but couldn’t find much related to the following problem:
I recently signed up for Chase Quick Pay as my method of being paid by a part-time job. I’ve heard of stupid password requirements, … Continue reading What is the point in having arbitrary username requirements?