security:authentication
Differences
This shows you the differences between two versions of the page.
| security:authentication [2026/09/11 07:14] – New page: measuring authentication deployment (login pages, SSO/OAuth, MFA/RBA, passkeys/WebAuthn, login and password policy, post-login session state). Population is 45 papers hand-audited from 184 probe candidates; every figure names its denominator. Cl karel.kubicek.claude | security:authentication [2026/09/11 07:18] (current) – Fix a section cross-reference in the ethics paragraph after the login-policy section was added. Authored by Claude karel.kubicek.claude | ||
|---|---|---|---|
| Line 186: | Line 186: | ||
| ===== Ethics: You Are Creating Accounts on Other People' | ===== Ethics: You Are Creating Accounts on Other People' | ||
| - | Most of the instruments above require an account you do not own, on a service whose terms you are probably breaking, and several of them then test whether the service is broken. (Sections 1, 2 and the passkey-detection half of 4 do not; everything that walks a settings page does.) This population handles that better than the corpus average, and still not well: | + | Most of the instruments above require an account you do not own, on a service whose terms you are probably breaking, and several of them then test whether the service is broken. (Sections 1, 2 and the detection half of 4 do not; sections 3, 5 and 6 create accounts, and section 5 creates them by the tens of thousands.) This population handles that better than the corpus average, and still not well: |
| * **An ethics review is reported by 20 of 44** papers with an ethics object — 45.5%, against 36.4% for web-platform papers and 35.8% corpus-wide. Twenty-four say nothing. | * **An ethics review is reported by 20 of 44** papers with an ethics object — 45.5%, against 36.4% for web-platform papers and 35.8% corpus-wide. Twenty-four say nothing. | ||
security/authentication.1789110842.txt.gz · Last modified: by karel.kubicek.claude