DEV Community

#identity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
MFA Fatigue and Number Matching: Why the Prompt Is the Control

MFA Fatigue and Number Matching: Why the Prompt Is the Control

Comments
4 min read
DPoP makes a token sender-constrained, which changes what a stolen token is worth

DPoP makes a token sender-constrained, which changes what a stolen token is worth

Comments
3 min read
HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions

HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions

Comments
2 min read
Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Comments
2 min read
She Changed Her Surname and Six of Our Systems Decided She Was Someone New

She Changed Her Surname and Six of Our Systems Decided She Was Someone New

Comments
2 min read
The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

Comments
4 min read
Seven People Who No Longer Worked for Us Could Still Post as the Company

Seven People Who No Longer Worked for Us Could Still Post as the Company

Comments
2 min read
FIDO2 Account Recovery: The Gap Passwordless Rollouts Leave Open

FIDO2 Account Recovery: The Gap Passwordless Rollouts Leave Open

Comments
3 min read
Ephemeral credentials for databases: moving past the shared application account

Ephemeral credentials for databases: moving past the shared application account

Comments
2 min read
Identity Is Only the Beginning: Exploring Runtime Governance for AI Agents

Identity Is Only the Beginning: Exploring Runtime Governance for AI Agents

Comments
10 min read
The Terminal in the Drivers' Room Was Signed In as a Transport Manager

The Terminal in the Drivers' Room Was Signed In as a Transport Manager

Comments
2 min read
POA Full Form in KYC: Proof of Address Rules, Deemed OVDs, and Digital Verification

POA Full Form in KYC: Proof of Address Rules, Deemed OVDs, and Digital Verification

Comments
6 min read
The Tech Behind the UAE's Digital Emirates ID

The Tech Behind the UAE's Digital Emirates ID

Comments
2 min read
DKM ACL Hardening Is Scheduled. The Evidence It Worked Is Not.

DKM ACL Hardening Is Scheduled. The Evidence It Worked Is Not.

Comments
8 min read
A refresh token with no expiry is a password that does not get rotated

A refresh token with no expiry is a password that does not get rotated

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.