Tootfinder

Opt-in global Mastodon full text search. Join the index!

@arXiv_csCR_bot@mastoxiv.page
2025-09-26 09:00:01

Beyond SSO: Mobile Money Authentication for Inclusive e-Government in Sub-Saharan Africa
Oluwole Adewusi, Wallace S. Msagusa, Jean Pierre Imanirumva, Okemawo Obadofin, Jema D. Ndibwile
arxiv.org/abs/2509.20592

Beyond SSO: Mobile Money Authentication for Inclusive e-Government in Sub-Saharan Africa
The rapid adoption of Mobile Money Services (MMS) in Sub-Saharan Africa (SSA) offers a viable path to improve e-Government service accessibility in the face of persistent low internet penetration. However, existing Mobile Money Authentication (MMA) methods face critical limitations, including susceptibility to SIM swapping, weak session protection, and poor scalability during peak demand. This study introduces a hybrid MMA framework that combines Unstructured Supplementary Service Data (USSD)-b…

@cyrevolt@mastodon.social
2025-09-25 16:41:45

sso.secureserver.net
office365.com
account.microsoft.com
myaccount.microsoft.com
no wonder Microsoft customers get pwned all the time

@dawid@social.craftknight.com
2025-09-21 10:18:42
@… Jak bym ja to zrobił - panel klienta z obsługą płatności zarzącający aktywacją konta w ldap/sso, no i forgejo spięte z tymże ldap/sso. Zakładasz konto, i aktywujesz przez płatność. Nie płacisz - blokada konta.
@cyrevolt@mastodon.social
2025-09-25 16:41:45

sso.secureserver.net
office365.com
account.microsoft.com
myaccount.microsoft.com
no wonder Microsoft customers get pwned all the time

@arXiv_csCR_bot@mastoxiv.page
2025-10-10 09:46:49

ExPrESSO: Zero-Knowledge backed Extensive Privacy Preserving Single Sign-on
Kaustabh Barman, Fabian Piper, Sanjeet Raj Pandey, Axel Kuepper
arxiv.org/abs/2510.08355

ExPrESSO: Zero-Knowledge backed Extensive Privacy Preserving Single Sign-on
User authentication is one of the most important aspects for secure communication between services and end-users over the Internet. Service providers leverage Single-Sign On (SSO) to make it easier for their users to authenticate themselves. However, standardized systems for SSO, such as OIDC, do not guarantee user privacy as identity providers can track user activities. We propose a zero-knowledge-based mechanism that integrates with OIDC to let users authenticate through SSO without revealing…

@arXiv_csSE_bot@mastoxiv.page
2025-10-06 09:12:39

Automated Repair of OpenID Connect Programs (Extended Version)
Tamjid Al Rahat, Yanju Chen, Yu Feng, Yuan Tian
arxiv.org/abs/2510.02773 arx…

Automated Repair of OpenID Connect Programs (Extended Version)
OpenID Connect has revolutionized online authentication based on single sign-on (SSO) by providing a secure and convenient method for accessing multiple services with a single set of credentials. Despite its widespread adoption, critical security bugs in OpenID Connect have resulted in significant financial losses and security breaches, highlighting the need for robust mitigation strategies. Automated program repair presents a promising solution for generating candidate patches for OpenID imple…