Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [identification]

The tag has no usage guidance.

1
vote
0answers
8 views

Sending file from Linux to Windows with SCP Comand [migrated]

I know there are allready some threads about this but still none of them helped me to solve my problem. I want to send a simple text file from my Linux machine to my windows 10 pc using the spc ...
0
votes
1answer
44 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
2
votes
1answer
61 views

Hiding the identitiy of an author

I would like to share some sensitive information in a PDF document that I created, but I'm afraid that my identity can be traced back. I installed a trial Microsoft Word on a Windows 7 (guest OS on ...
1
vote
1answer
106 views

Can a scanning id system like trusona really be secure?

I became aware of Trusona recently (see their demo on this page https://www.trusona.com/ ). They want to 'end passwords'. I believe in the idea that 'reasonable security' = {something you are + ...
1
vote
1answer
170 views

Understanding ANSI/AAMVA encoded data (pdf417 data matrix) on back of NYS ID card

Background I am developing an Android application for work which runs on a Zebra TC51 bar code scanner, which I have been playing around with.. I scanned my NYS drivers license and inspected the ...
1
vote
1answer
214 views

VoIP service requires a scanned copy of my passport

In the process of registering to Callcentric, they asked me a scanned copy of my passport. I already gave them my mobile number, where they could possibly make an interview, and of course they have ...
2
votes
3answers
162 views

Partitioning database to enhance security/anonymity?

The goal here is to prevent identification of the users and their data. Is it a good idea to partition my database into multiple ones, one for each kind of sensitive data, hiding the links between ...
0
votes
0answers
21 views

Using Access Readers for software access

Is it possible to use card access readers for something other than physical access? I've been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some ...
4
votes
3answers
219 views

Is it possible to identify mobile phone user with voice recognition

A friend of mine claims that it is possible to identify every anonymous call (prepaid, skype, etc) only using voice recognition. However the scientific literature which I've read so far is ambiguous, ...
1
vote
1answer
179 views

How can a network admin uniquely identify machines on their network?

My network admin might have a record of my default MAC address tied with some mischievous doings as well as my currently used address that they've likely collected after I started accessing using ...
2
votes
3answers
128 views

How to recognize the machine from which a request is coming?

At my work there are certain internal sites which I can access from my home but only through my work laptop. I wonder how this works. When my work laptop is connected to the corpnet, it has one IP ...
3
votes
1answer
172 views

How can we show our end-users that we are trusted by a bank?

We are developing an website which serves end users of many organizations (banks , municipalities etc). We have already setup meetings with the banks and they've agreed to work with us. Ok so let's ...
2
votes
0answers
75 views

Security implications of owning a German electronic ID card

I am German and about to renew my ID card. Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
0
votes
0answers
244 views

How to verify identity of a person and prevent fake identities from being accepted?

I have a question regarding how to best identify a person/customer, verifying that who they say they are is really that person. I work for an insurance organization, where customers purchase insurance ...
1
vote
1answer
56 views

Logging scarce outbound communication

I have the following predicament. I am tasked with making sure our client's workstations are squeaky clean from a Malware point of view. We have been blessed with Websense as a malicious outbound ...
0
votes
1answer
68 views

Can counter-based OTPs instantly be reused at multiple services?

I am reading about hardware-based 2FA and wonder about counter-based OTPs generated from, for example, a Yubikey. I have read that in these cases, a push of a button generates a string composed of a ...
0
votes
1answer
75 views

Identity exposure by using same proxy?

I read several times it is a very bad idea and a huge lack of security to use the same proxy for logging into facebook or other sites containing information about real personal details e.g. linkedin ...
1
vote
2answers
132 views

How does this site uniquely identify a device?

First try clicking on the blue button here. Then if you have a VPN start it up, open the terminal and curl the same link. In the response, you will see that the button is now disabled. The server ...
2
votes
2answers
244 views

How much identifying information is in a photograph?

If I take a photograph with a smartphone camera, how much information is there that could be used to identify the owner? I know of Exif tags and that all cameras have slight manufacturing variations ...
0
votes
3answers
59 views

How to prove identity of my users from the public JSON files?

In the system that I am building, users create their own public JSON files on the Internet, available to anyone. My system does not store these JSON files nor have anything except read only access to ...
2
votes
1answer
48 views

How to securely ask for additional PII / account verification?

Since it's a bad practice to ask users to click on a URL within an email to verify their identity due to phishing concerns, what is the best way to ask a user that additional PII information is ...
4
votes
1answer
741 views

How to use TPM to identify a computer for licensing purposes?

I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
3
votes
3answers
215 views

Can identification imply authentication in biometric systems?

I know the difference between Identification and Authentication, which are basically claiming who you are and proving that claim. In terms of a system, they are username and password in general. But ...
3
votes
1answer
420 views

Risks of using UUID to identify user in mobile app

I've got an existing customer base. A customer has appointments. Currently they cannot access or change their appointments without contacting me directly. I want to offer them a way to access and ...
0
votes
1answer
69 views

Checking if my username X is the same guy as username Y

I'm creating a new alias online for creative works that I don't want anyone I know in real life to see, but I'd like it to be possible for online people to check that things copyrighted and licensed ...
4
votes
1answer
4k views

Beyond Nmap: Investigating open TCP ports bound to unknown services

I have an uninvited guest using my private WLAN. At first I thought it was probably just a tech-savvy neighbour in need of Internet access, in which case; it wouldn't really bother me. However, I've ...
1
vote
1answer
48 views

Multi-User-Server Public-Key-Based Authentication

So, lets say we have Alice, John, Peter and Bob. Alice, John and Bob all know Peter's public key and trust Peter. Alice wants to connect to Bob's server, so she presents her public key, which was ...
3
votes
3answers
2k views

Does MAC spoofing prevent identification?

I regularly connect to public wireless APs scattered around the city, offered by my carrier. I remember reading an article that a determined owner can track you between APs and thus know your location ...
0
votes
1answer
69 views

Principal Password in Kerberos KDC database

Is there a way for me to merge a bank account number, fingerprint image and IMEI of a phone into a single entity that I could possibly use as a password in the Kerberos KDC to uniquely identity a ...
4
votes
0answers
97 views

What personal information, if any, can be gleaned from a Microsoft APPCRASH problem signature?

I am trying to debug an "APPCRASH" problem event for a program running on Microsoft Windows 7. When this happens a problem signature is presented, like this example from SuperUser: Problem Event ...
1
vote
2answers
1k views

Is there a way to uniquely identify a mobile device through packet sniffing?

I need to uniquely identify a mobile device using the "ping" packets that it transmits to cellular towers regularly, in an area of interest by installing a packet sniffer at that location? I only need ...
2
votes
1answer
5k views

How WhatsApp identifies a specific user

How does WhatsApp identify a specific user in order to forward the messages to him? Here is what I did: I backed up my iOS App from my old device Restored the backup to the new device Opened ...
1
vote
1answer
1k views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it doesn't ...
0
votes
1answer
187 views

Protect software from copy [duplicate]

Imagine I wrote some software on .NET which will run on client machine. Is it possible to detect that someone copied my software to different computer? (Assuming my software can connect to a remote ...
0
votes
1answer
58 views

How do API's authenticate a user?

I've read many documents about API's but they don't seem to mention API's for private accounts instead of publicly accessible information. How does an API work to request private account data? How ...
1
vote
0answers
48 views

Let users sign in with eIDs - do I need government authorisation? (scope: all nation-states) [closed]

I've decided to launch a crypto-basic income system. Crypto UBIs are pretty popular now. For me, it seems like an open nation-state ID should exist by now (2015). However, Mike Hearn, Bitcoin core-...
-4
votes
2answers
306 views

How to identify this hash?

I have one hash, I know its value, but not its type. Here is it: 6dfb036bf703d75f9bc8219ba1224d876783fa61 I tried something like php -r "echo sha1('abc');", but it gave me another value, so this ...
2
votes
5answers
3k views

How can I uniquely identify an user when cookies are not an option?

In web application development, how can I uniquely identify an user when cookies are not an option and IPs are dynamic? Are the patterns which I can combine and then created a hash to be used as a UID?...
12
votes
2answers
79k views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: Enter last 4 ...
1
vote
1answer
109 views

SSL/TLS entity identification

Does SSL/TLS contain any form of identification in the initial handshake, so an attacker cannot simply waive the certificate around claiming they are someone else? Wikipedia did not say that it did, ...
2
votes
1answer
2k views

Are internal patient identifiers considered PHI under HIPAA?

We use GUIDs to internally to identify patients in our system. I'm having a debate with our regulatory people on whether these identifiers can be used in query strings to REST calls. They are ...
-4
votes
4answers
309 views

Why aren't all photo-IDs/cards digitized these days, for security/convenience? [closed]

With so many people losing wallets and physical, plastic pieces of ID cards, drivers licenses, etc., why haven't we moved on to fully digitized ID in the digital world? We have made money almost ...
3
votes
1answer
2k views

Why do websites ask for the last four digits of your social security number?

Quite a few websites, Coinbase and Stripe most notably, ask for the last four digits of your social security number to 'verify your identity'. Assuming these websites are not trying to fraud you, how ...
2
votes
1answer
96 views

How good is confidentiality with physical mail forwarding companies? [closed]

I want to use a mail forwarding company that can receive mail for me and forward it to another address. I found many places that do this, but I am worried that eventually my stalker would find out ...
1
vote
1answer
105 views

Is there any College, State or Government ID that transmits a offline verifiably encryptable data blob?

I'm looking for any way to digitally verify a user, ideally with a photo and link PII to that user. My use case is that a user will extract and send an encrypted data blob (say from a passport) to my ...
8
votes
1answer
195 views

Anonymity of sneakernet: identifiable information on removable storage

Alice, an anonymous informant, would like to transmit digital documents to Bob while maintaining her anonymity. For whatever reason, she chooses to copy the documents to some kind of physical ...
2
votes
1answer
128 views

What is the best way to be sure of user's identity?

Not sure this is the right stack to ask this in, it's kind of an abstract question. Say you have a website where it is very important that the personal information provided by the users is authentic. ...
2
votes
2answers
890 views

How does a user get authorized wihtout authentication

I have a back-end (API) and a front-end, eg a web server, and I have users and ID-providers. The web server is provided by a third aprty and it may just as well be a mobile app, but whatever the case ...
2
votes
1answer
843 views

Why not oAuth for Authentication - AKA what is bad about OpenID Connect [duplicate]

I read many questions and answers on this forum stating that oAuth is for authorization, OpenID is for authentication and more than a few of them goes on to say that OpenID Connect provides ...
2
votes
1answer
119 views

What are proper security precautions when enabling multiple connected social accounts or login/authorization methods?

It is popular today for frameworks and social sites to enable multiple authorization options when creating websites. For example, allowing a user to login with GitHub, Twitter, Facebook, etc. In ...