pwlb

5 ms·

1.
by pwlb 5mo ago
Many neurodivergent people are simply overwhelmed by the sound on the streets
2.
by pwlb 6mo ago
The documentation actually reveals why this will most likely not work, given you are on expert on mobile security
3.
by pwlb 6mo ago
The documentation clearly outlines that there are multiple signals being analysed. Relying on play integrity alone is definitely not sufficient as you state.
4.
by pwlb 6mo ago
EIDAS 2 motivation is implicitly that eID failed in eIDAS 1. It simply either didn't take off or didn't work at all
5.
by pwlb 6mo ago
This is necessary because the wallets contain an identity proofing functionality called PID(Person Identification Data). Showing these credentials basically approves you are you. There are high requirements for identity proofing that even p
6.
by pwlb 6mo ago
Banks actually have high fraud rates today because of weak security mechanisms. If attackers steal your money, the bank will reimburse you. If attackers steal your identity, you are really screwed. Security requirements for banking and iden
7.
by pwlb 6mo ago
Preventing credential duplication is a requirement to achieve high level of assurance. One of its purpose is to limit the potential damage that can be done by attacks. If credentials are bound to hardware-bound keys, attackers will always n
8.
by pwlb 1y ago
This is due to many parts of the system being spread across multiple IETF RFCs, which happens as OAuth was improved and made more secure over time. Efforts are underway by combining all important parts into OAuth 2.1, otherwise have a look
9.
by pwlb 1y ago
You may have a look at this (still a Draft): https://datatracker.ietf.org/doc/draft-ietf-oauth-status-lis...
10.
by pwlb 5y ago
Where exactly do people move if they only chose between Firefox and Chrome, there is not enough competition in the browser market
11.
by pwlb 5y ago
First,which DID methods will be successful is a question of time, additional your wallet app could support multiple of these DID methods. Second, DID and the corresponding keys are supposed to be owned by the user or managed by a platform,
12.
by pwlb 5y ago
Not necessarily is DID connected to publishing something on a blockchain. First: DID does not make any statements to the underlying infrastructure, this can be a completely decentralized public, permissionless blockchain but also public, pe
13.
by pwlb 5y ago
not yet, but identity giants like okta and ping are already looking at SSI very carefully. digital identity will be key in the next years
14.
by pwlb 5y ago
Self-Sovereign Identity and DIDs are a very fast moving train. People argue that in the early internet days there was a similar competition between new protocols(compare with DID methods) before we arrive in our todays HTTP(S)-only world. S
15.
by pwlb 5y ago
That sounds like a view from last century. FAANG multinational, sovereign companys and they are interested in money and are not interested in losing their userbase. moreover a lot of these companys have offices in europe as well, so part o
16.
by pwlb 5y ago
Core mechanisms to prevent Man-in-the-Middle are missing in the article: PublicKey/certificate-Pinning or PKIs. Cryptography is best left to the experts, most of todays javascript developers are probably missing the knowledge to implem
17.
by pwlb 6y ago
Self-Sovereign Identity might replace major parts of the federated identity market within 5 years i expect. even Okta CEO admitted that self-sovereign identity will be the future. the major problem is that the decentralized nature of SSI,
18.
by pwlb 6y ago
Is there any country in history that prevented its downfall because its civilians are armed to the teeth?
19.
by pwlb 6y ago
Anybody who wants to this with Linux: scrcpy uses adb(turn on usb debug) und works like a charm
20.
by pwlb 6y ago
comparing all the stocks, seeing that only tesla is in a stable curve near the end, leads me to the following conclusion: Both Tesla and Bitcoin are heavily overpriced!
21.
by pwlb 6y ago
encryption is only and-to-end, and searching on your device is easily doable
22.
by pwlb 6y ago
I chose a dangerous sport on my own. The car speeding with 200km/h into your car, will have an impact on your life even if you stick to 120km/h
23.
by pwlb 6y ago
This sounds like a Law&Order mindset. No, its generally not a great idea to get fingerprints of everything.
24.
by pwlb 6y ago
This is also a question of tradition and choices. Speaking for eastern Germany, it was very common for women to work and this is also a choice of living, maybe encouraged by independency/emancipation
25.
by pwlb 7y ago
I'm rock climbing as well and I devleoped a similar biometric token for my company, my experience is that the thumb works best, as you usually don't use your thumb a lot for rock climbing compared to the other 4 fingertips
26.
by pwlb 7y ago
Firefox Sync let's you syncronize Bookmarks, Open tabs, Logins, History, Add-ons and Preferences across devices by logging in once with username password
27.
by pwlb 7y ago
intresting article about the phenomenom: http://www.ep.sci.hokudai.ac.jp/~heki/pdf/Scientific_America...
28.
by pwlb 10y ago
It's gonna be hard if you really want security. Card developers put a lot of effort into securing operations against sidechannel pertuberation, sidechannel and many more attacks, that opensource developers will hardly be able to handle