Skip to main content

Questions tagged [identification]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
64 views

Is electronic signature a proper/sufficient mean for identification/authentication?

We have received an electronically signed GDPR data request from a person who has only provided his name and surname. We wanted to be sure that this person is who he claims he is, so we have asked to ...
ZygD's user avatar
  • 279
0 votes
0 answers
118 views

Retrieving Android phone's identifiers

I will be publishing a fingerprinting app that shows its user how much access to their Android phone's identifiers it has. I haven't started writing it because I need to understand how can any Android ...
CurtisB's user avatar
  • 33
0 votes
1 answer
1k views

Identifying a ransomware with .mkp file extensions

Yesterday, a ransomware hit my PC. I didn't pay the ransom and didn't comply with what the attackers were asking for and I wiped everything and every drive on my PC and then reinstalled my stuff from ...
newly-arrived guest's user avatar
0 votes
1 answer
649 views

Fraud Detection - 2FA Bypass Methods and SIM Cloning

I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
Hack-R's user avatar
  • 203
0 votes
1 answer
564 views

How malware file signature is generated?

How is the malware file signature generated? Does it use a sequence of bytes in the beginning, size, PE (export, import, section), etc? And can the MD5 or SHA256 be considered a file signature for a ...
0xh3xa's user avatar
  • 113
1 vote
1 answer
139 views

How can websites fingerprint the company I work for?

During my work day, I came upon a website that had a popup that identified the company I work for(basically saying "contact us X company"). This website was never previously visited, cookies ...
Joe's user avatar
  • 11
1 vote
1 answer
2k views

What traces are left on a USB stick after using it?

If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick? I know OS can log which ...
William's user avatar
  • 21
3 votes
1 answer
1k views

Guidance on Storing Email Addresses as Hashes

I am building an application where one user (User A) can store a "query" of another user (User B) that may or may not exist in the system. This query can be done by email address. The ...
Mike-E's user avatar
  • 185
0 votes
0 answers
200 views

How reliable is a mathematical model of a human fingerprint for identification?

How reliable is a mathematical model of a human fingerprint for identification? I am looking for a way to uniquely identify individuals that is very reliable and easy to use that does not require ...
polcott's user avatar
  • 93
0 votes
1 answer
234 views

Can we prevent users from generating a QR code with edited information

Currently there is this design of two apps that work together: Proof app: On customers phone, takes in a textcode and creates a QR code Scanner app: On hosts phone, Scans the QR code and displays ...
Dennis Jaheruddin's user avatar
3 votes
1 answer
1k views

Nonprofit organizations asking me to email them a photo of my driver's license

Recently I've had two nonprofit organizations ask me to email them a photo of my driver's license. No money is changing hands, and both of these are legitimate and well-known nonprofits. Organization ...
user avatar
1 vote
1 answer
950 views

May I use OAuth2 for non third-party applications?

I need some help to understand my problem. I'm studying a way to provide authentication for my applications. My scenario: I have a set of APIs with restricted access and users that will be ...
Simio's user avatar
  • 11
0 votes
2 answers
262 views

What is the current state of author recognition software and what can be done about it?

I'm curious what the current state of author recognition software is, i.e. software that detects the author of a certain anonymous text based on a certain pool of texts obtained from elsewhere. This ...
Sebastiaan van den Broek's user avatar
5 votes
2 answers
2k views

Very strange gibberish strings with Cyrillic characters that appear in random websites and elsewhere

In my work with online orders, I started noticing an extreme abnormality in a few orders. In one field that wasn't restricted there appeared a string of over 3 million characters that were totally ...
Khris's user avatar
  • 161
0 votes
0 answers
458 views

Reproducible method to generate an anonymous identifier?

I've been working on a web application that needs to provide a way to create an anonymous identifier that can be used to identify one or more rows in a database that refer to a person who has called ...
Dustin's user avatar
  • 1
76 votes
13 answers
22k views

Why do people hide their license plates in the EU?

I often recognise that people blur their license plates on pictures on the internet in Germany. I can't figure out what's the fuss. The information is public nevertheless (I mean it's on your vehicle),...
OddDev's user avatar
  • 629
2 votes
0 answers
486 views

How to defend against adblock detection/adblock subscription leaks?

Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I'm not asking about how to bypass adblock detection as such, but rather how one might appear ...
Lichtung's user avatar
2 votes
1 answer
143 views

Hiding the identitiy of an author

I would like to share some sensitive information in a PDF document that I created, but I'm afraid that my identity can be traced back. I installed a trial Microsoft Word on a Windows 7 (guest OS on ...
John Doe's user avatar
2 votes
1 answer
2k views

Can a scanning id system like trusona really be secure?

I became aware of Trusona recently (see their demo on this page https://www.trusona.com/ ). They want to 'end passwords'. I believe in the idea that 'reasonable security' = {something you are + ...
Zorglub29's user avatar
  • 317
2 votes
1 answer
8k views

Understanding ANSI/AAMVA encoded data (pdf417 data matrix) on back of NYS ID card

Background I am developing an Android application for work which runs on a Zebra TC51 bar code scanner, which I have been playing around with.. I scanned my NYS drivers license and inspected the ...
Chris Maggiulli's user avatar
2 votes
1 answer
439 views

VoIP service requires a scanned copy of my passport

In the process of registering to Callcentric, they asked me a scanned copy of my passport. I already gave them my mobile number, where they could possibly make an interview, and of course they have ...
antonio's user avatar
  • 857
2 votes
3 answers
683 views

Partitioning database to enhance security/anonymity?

The goal here is to prevent identification of the users and their data. Is it a good idea to partition my database into multiple ones, one for each kind of sensitive data, hiding the links between ...
pawamoy's user avatar
  • 123
0 votes
0 answers
98 views

Using Access Readers for software access

Is it possible to use card access readers for something other than physical access? I've been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some ...
Mogarrr's user avatar
  • 161
4 votes
3 answers
1k views

Is it possible to identify mobile phone user with voice recognition

A friend of mine claims that it is possible to identify every anonymous call (prepaid, skype, etc) only using voice recognition. However the scientific literature which I've read so far is ambiguous, ...
CuriousIndeed's user avatar
1 vote
1 answer
815 views

How can a network admin uniquely identify machines on their network?

My network admin might have a record of my default MAC address tied with some mischievous doings as well as my currently used address that they've likely collected after I started accessing using ...
Joe's user avatar
  • 21
2 votes
3 answers
303 views

How to recognize the machine from which a request is coming?

At my work there are certain internal sites which I can access from my home but only through my work laptop. I wonder how this works. When my work laptop is connected to the corpnet, it has one IP ...
morpheus's user avatar
  • 131
3 votes
1 answer
267 views

How can we show our end-users that we are trusted by a bank?

We are developing an website which serves end users of many organizations (banks , municipalities etc). We have already setup meetings with the banks and they've agreed to work with us. Ok so let's ...
Royi Namir's user avatar
2 votes
0 answers
149 views

Security implications of owning a German electronic ID card

I am German and about to renew my ID card. Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
Byte Commander's user avatar
1 vote
1 answer
138 views

Logging scarce outbound communication

I have the following predicament. I am tasked with making sure our client's workstations are squeaky clean from a Malware point of view. We have been blessed with Websense as a malicious outbound ...
user137684's user avatar
0 votes
1 answer
165 views

Can counter-based OTPs instantly be reused at multiple services?

I am reading about hardware-based 2FA and wonder about counter-based OTPs generated from, for example, a Yubikey. I have read that in these cases, a push of a button generates a string composed of a ...
bers's user avatar
  • 240
0 votes
1 answer
156 views

Identity exposure by using same proxy?

I read several times it is a very bad idea and a huge lack of security to use the same proxy for logging into facebook or other sites containing information about real personal details e.g. linkedin ...
Artery's user avatar
  • 239
1 vote
2 answers
261 views

How does this site uniquely identify a device?

First try clicking on the blue button here. Then if you have a VPN start it up, open the terminal and curl the same link. In the response, you will see that the button is now disabled. The server ...
silkAdmin's user avatar
  • 103
2 votes
2 answers
376 views

How much identifying information is in a photograph?

If I take a photograph with a smartphone camera, how much information is there that could be used to identify the owner? I know of Exif tags and that all cameras have slight manufacturing variations ...
Nathan Ringo's user avatar
0 votes
3 answers
135 views

How to prove identity of my users from the public JSON files?

In the system that I am building, users create their own public JSON files on the Internet, available to anyone. My system does not store these JSON files nor have anything except read only access to ...
Duke Dougal's user avatar
2 votes
1 answer
132 views

How to securely ask for additional PII / account verification?

Since it's a bad practice to ask users to click on a URL within an email to verify their identity due to phishing concerns, what is the best way to ask a user that additional PII information is ...
makerofthings7's user avatar
6 votes
1 answer
3k views

How to use TPM to identify a computer for licensing purposes?

I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
José Tomás Tocino's user avatar
2 votes
3 answers
334 views

Can identification imply authentication in biometric systems?

I know the difference between Identification and Authentication, which are basically claiming who you are and proving that claim. In terms of a system, they are username and password in general. But ...
Victor Wong's user avatar
3 votes
1 answer
1k views

Risks of using UUID to identify user in mobile app

I've got an existing customer base. A customer has appointments. Currently they cannot access or change their appointments without contacting me directly. I want to offer them a way to access and ...
TragedyStruck's user avatar
0 votes
1 answer
140 views

Checking if my username X is the same guy as username Y

I'm creating a new alias online for creative works that I don't want anyone I know in real life to see, but I'd like it to be possible for online people to check that things copyrighted and licensed ...
Foxcat385's user avatar
  • 717
5 votes
1 answer
11k views

Beyond Nmap: Investigating open TCP ports bound to unknown services

I have an uninvited guest using my private WLAN. At first I thought it was probably just a tech-savvy neighbour in need of Internet access, in which case; it wouldn't really bother me. However, I've ...
voices's user avatar
  • 1,789
2 votes
1 answer
122 views

Multi-User-Server Public-Key-Based Authentication

So, lets say we have Alice, John, Peter and Bob. Alice, John and Bob all know Peter's public key and trust Peter. Alice wants to connect to Bob's server, so she presents her public key, which was ...
JohnGmdv's user avatar
3 votes
3 answers
8k views

Does MAC spoofing prevent identification?

I regularly connect to public wireless APs scattered around the city, offered by my carrier. I remember reading an article that a determined owner can track you between APs and thus know your location ...
Alex's user avatar
  • 819
0 votes
1 answer
150 views

Principal Password in Kerberos KDC database

Is there a way for me to merge a bank account number, fingerprint image and IMEI of a phone into a single entity that I could possibly use as a password in the Kerberos KDC to uniquely identity a ...
Faisal Ali Gama's user avatar
3 votes
0 answers
158 views

What personal information, if any, can be gleaned from a Microsoft APPCRASH problem signature?

I am trying to debug an "APPCRASH" problem event for a program running on Microsoft Windows 7. When this happens a problem signature is presented, like this example from SuperUser: Problem Event ...
Lee's user avatar
  • 131
1 vote
2 answers
2k views

Is there a way to uniquely identify a mobile device through packet sniffing?

I need to uniquely identify a mobile device using the "ping" packets that it transmits to cellular towers regularly, in an area of interest by installing a packet sniffer at that location? I only need ...
Ashley's user avatar
  • 11
2 votes
1 answer
9k views

How WhatsApp identifies a specific user

How does WhatsApp identify a specific user in order to forward the messages to him? Here is what I did: I backed up my iOS App from my old device Restored the backup to the new device Opened ...
Flexair Flexair's user avatar
1 vote
1 answer
2k views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it doesn't ...
user3695903's user avatar
0 votes
1 answer
716 views

Protect software from copy [duplicate]

Imagine I wrote some software on .NET which will run on client machine. Is it possible to detect that someone copied my software to different computer? (Assuming my software can connect to a remote ...
user avatar
0 votes
1 answer
116 views

How do API's authenticate a user?

I've read many documents about API's but they don't seem to mention API's for private accounts instead of publicly accessible information. How does an API work to request private account data? How ...
John's user avatar
  • 1
1 vote
0 answers
102 views

Let users sign in with eIDs - do I need government authorisation? (scope: all nation-states) [closed]

I've decided to launch a crypto-basic income system. Crypto UBIs are pretty popular now. For me, it seems like an open nation-state ID should exist by now (2015). However, Mike Hearn, Bitcoin core-...
J. Doe's user avatar
  • 19