Tag Info

New answers tagged

5

I live outside the US so I'm not sure exactly how SSNs are normally used, but it sounds like they're using these details as a key to look you up in an external identity verification service. This isn't too uncommon in relation to property rentals seeing as most physical rental agencies want scans of your ID, etc. any way. 1) Why do some companies want ...


2

The last 4 of your SSN is considered "public" data. The questions you were asked were part of LexusNexus (http://www.lexisnexis.com/). It's a clearinghouse that businesses and government agencies use to assert your identity. It is a bit disconcerting the things that are in the database, but it is normal. As for the photo ID question, that'll have to be a ...


0

First of all, what you are asking for is not steganography, it's watermarking. Steganography is the art of hiding information within normal data. There you do not disclose that you are sending hidden information and you want to be immune to statistical analysis. The goal of steganography is to hide in the mass of data, without someone being able to pinpoint ...


3

Steganography is about concealing information in a medium (e.g. pictures) in a way that people who look at the medium are unaware of the presence of that information. What you want is something else called watermarking: how to embed some information which is hard to remove. A good watermark does not alter (too much) the medium in the eyes of onlookers, but ...


0

an official nation-state institution [...] could easily let their citizens verify themselves online. [...] do any nation-states have APIs for this? Yes, Germany has, as far as I understand, pretty much what you're describing: https://www.ausweisapp.bund.de/startseite/ However, I don't think it's foolproof, since identity cards can be stolen on the ...


4

There a few reasons for using different keys for signing and authentication: When using two keys associated certificates can be issued from different CAs with allows web sites to ask user only for authentication certificate on login. The certificates can be issued with different key usage - authentication one don't need non-repudiation, and signature one ...


1

A digital signature is a technological mechanism by which you can do several things, one of them being proving your identity to another entity: this is an authentication protocol. Your identity is a property inherent to, say, yourself; the notion of "electronic identity" really means "something which designates your identity and is amenable to an ...


3

If we are talking about RSA, then the public key is, nominally, the combination of: The modulus n The public exponent e while the private key is the knowledge of the prime factors of n (traditionally, n is the product of two prime factors p and q of similar size). Formally, the private key is really the combination of the modulus and the private exponent ...


4

Email verification doesn't provide extra security. It just validates than the newly registered user is the legitimate owner of that email address. For security concern a best practice for a web site would be not to send any email to an unconfirmed email address. This prevent leaking information to someone who mistyped his email address. Anyhow you ...


0

The purpose of the email verification for most services is to ensure user uniqueness (and thereby, hopefully, humanity) so that the provider can resist having many legions of spam accounts set up with ease (it's still possible, just more difficult). In getting a response, the service can then deny any future users from that email address from having a ...



Top 50 recent answers are included