3 ms·
Can you decribe a mechanism to verify that users in an alleged leak are the same users as your own?
by pompino 3y ago
Can you decribe a mechanism to verify that users in an alleged leak are the same users as your own?
- shermantanktop 3y agoIs your user population large and unsophisticated? If "Yes," then you have shared users who are reusing passwords.
- pompino 3y agoCan you answer my question rather than your own, please? Otherwise we're just going in circles.
- shermantanktop 3y ago> Can you decribe a mechanism to verify that users in an alleged leak are the same users as your own? What I offered was the mechanism I would use to solve this problem, which is a probabilistic approach rather than a deterministic approach. What you described is likely infeasible and impossible, so rather than get blocked on that, I moved to an alternative angle.
- pompino 3y agoWhat is the mechanism? I don't see anything in the comment sorry. Maybe state it simply so I can follow along.
- shermantanktop 3y agoThere is no need for a mechanism in this case; building such a thing would be a waste of time. Honestly, I was trying to respond to your question, and perhaps I was too terse. But I don’t think the mechanism you ask for is possible (or desirable) today. In a future scenario with some type of universal identity there would probably be no need for such a mechanism.
- g-b-r 3y agoThere's no need whatsoever. Every single password that's ever been leaked should not be used by anyone ever again.
- pompino 3y agoThat is a statement of your opinion, but you'll have to make an argument if we are to have a discussion, else I can just leave it be. I have a nice idea about doing fake 'leaks' using known email addresses and forcing mass resets each week.