Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 106817

the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.

2 votes
3 answers
203 views

Would biometrics be more secure if it was a sequence and not a single biometric scan?

I was looking at this question How is Fingerprint Authentication Secure? … Where it talks about biometric scans, and the answer by @Lie Ryan mentions this isn't a secure authentication method, but more for identity and such for those who are witnessing you actually using your …
XaolingBao's user avatar
2 votes
5 answers
2k views

Is there more of a security risk by providing an email when creating a new account?

From there, we also have 2FA, which I'm not 100% how it works, but it seems to require authentication by using your mobile device, either a code or some sort of login from the device. …
XaolingBao's user avatar
1 vote
2 answers
331 views

Is there any benefit to keep sending UN/PW to the server over Session ID ( i.e., Stateless v...

I was reading this question about Session ID Hijacking and it gave a lot of answers about stealing Session IDs. I have been thinking about this for awhile, but is there a benefit to using Session ID …
XaolingBao's user avatar
0 votes
2 answers
175 views

Is there any added security/vulnerabilities if you allow a "trusted-party" to vouch you are ...

I was reading this answer on a question. https://security.stackexchange.com/a/498/106817 Recently, at the OWASP AppSec 2010 conference in Orange County, Bill Cheswick from AT&T talked at length abou …
XaolingBao's user avatar
1 vote
3 answers
176 views

Is there an added benefit to authentication within a part of an application, after authentic...

Both of the Applications implement security protocols for Authentication/Authorization on their own using the same security framework, but I'm not sure if they actually share any Session data (not sure …
XaolingBao's user avatar