New answers tagged web-application
5
votes
Is it possible to proxy USB and disconnect when a certain sequence is intercepted before it is (fully) passed to the real USB device?
It's unclear what technology you are referring to when you say a webUI that has access to a USB device. A web UI could mean any of:
a native application which presents UI via a WebView and interacts ...
- 151
4
votes
Is it possible to proxy USB and disconnect when a certain sequence is intercepted before it is (fully) passed to the real USB device?
Can't you just hack an existing device driver to monitor the data stream? Or do you not have the ability to swap in your special driver?
That way, there's no distinction between the virtual device and ...
- 163
6
votes
Accepted
Is encrypt a private key using the user password and store it into the server a bad idea?
It looks like you're trying to build a zero-knowledge end-to-end encryption system. I commend your consideration of security and privacy. However, be aware that these systems are hard to build right.
...
- 52.1k
0
votes
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
I agree only 80% with the other answers here that cleanly conclude that usernames are non-secrets. That is true if the username is completely "independent" of the secret password. In other ...
- 1,351
6
votes
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
We don't use password input fields for usernames because it prevents the user from correcting mistakes. This could be simple spelling mistakes but in the modern era we need to consider Apps themselves,...
- 216
12
votes
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
Adding to what was already said:
A lot of people use smartphones for internet access. Typing on a virtual keyboard makes easier to make mistakes, and having to type again a random username plus a ...
- 55.5k
19
votes
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
Usernames are intended to identify the individual user, and they're not usually considered to be secret. And this is especially true when you're threat is someone shoulder surfing, because they're ...
- 16.5k
44
votes
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
When using password authentication, then the authentication element is in fact the password. The username is just an identifier which could be entirely public (unless it contains sensitive data like ...
- 22.9k
Top 50 recent answers are included