1
vote
Accepted
Are JWT's needed when implementing passwordless magic link authentication?
You certainly don't need JWTs for this, and in many ways they're a bad choice because there are lots of different ways that they can go wrong if you're not careful, and you also have to think about ...
- 9,297
1
vote
Accepted
What's the relation between Mathematica's authentication keys called MathID, activation key, and password?
The details are likely proprietary and not open. But from the description the MathID is specific to the system and might be derived from some system properties so the the license cannot be simply ...
- 198k
1
vote
Is WIFI that is 'open' but requires a password to access the internet safe?
Any network which is not under your full control or under the full control of somebody you can trust should be considered potentially compromised or even malicious. This does not matter if this is an ...
- 198k
1
vote
Isn't there a critical built-in vulnerability in OAuth's Implicit flow?
First of all, the implicit flow is deprecated. it should not be used.
(it has been replaced with the PKCE flow)
The way the implicit flow works is by matching a known URI, source and client ...
- 8,833
1
vote
Login/Registration: why is not telling the users they got their username wrong during login, if registration already hint username existence?
The way to mitigate that would be to not give away this information during the registration process, but when your registration form is only email + password, you can not really do that ?
If you're ...
- 9,297
1
vote
Securing access to SAC from Windows EMS
At least according to Wikipedia, for EMS specifically, it says:
EMS is enabled per default in case BIOS serial console redirection is supported and enabled beforehand
I don't know if that ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible