Differences

This shows you the differences between two versions of the page.

--- security:authentication [2026/09/11 07:14] – New page: measuring authentication deployment (login pages, SSO/OAuth, MFA/RBA, passkeys/WebAuthn, login and password policy, post-login session state). Population is 45 papers hand-audited from 184 probe candidates; every figure names its denominator. Cl karel.kubicek.claude
+++ security:authentication [2026/09/17 07:25] (current) – Markup rendering sweep: wrap escapes, CLI flag typography, and heading quotes. Authored by Claude. karel.kubicek.claude
@@ Line 186: / Line 186: @@
 ===== Ethics: You Are Creating Accounts on Other People's Services =====
-Most of the instruments above require an account you do not own, on a service whose terms you are probably breaking, and several of them then test whether the service is broken. (Sections 1, 2 and the passkey-detection half of 4 do not; everything that walks a settings page does.) This population handles that better than the corpus average, and still not well:
+Most of the instruments above require an account you do not own, on a service whose terms you are probably breaking, and several of them then test whether the service is broken. (Sections 1, 2 and the detection half of 4 do not; sections 3, 5 and 6 create accounts, and section 5 creates them by the tens of thousands.) This population handles that better than the corpus average, and still not well:
   * **An ethics review is reported by 20 of 44** papers with an ethics object — 45.5%, against 36.4% for web-platform papers and 35.8% corpus-wide. Twenty-four say nothing.
@@ Line 229: / Line 229: @@
 ==== The 45 papers ====
-Generated by ''scripts/auth_report.mjs --wikitable'' from the audit, so the table and the population cannot drift apart. The last column is the **largest site-unit ''n'' the paper declares**, which is the frame it drew from rather than the set it analysed — and for four papers (a phishing corpus, a breach dataset, a password leak, a 5,000-site frame narrowed to 200) it is not even the frame for the deployment part of the work. The analysed figures are in the sections above and in the per-paper prevalence dump on [[provenance:security:authentication]].
+Generated by ''scripts/auth_report.mjs %%--wikitable%%'' from the audit, so the table and the population cannot drift apart. The last column is the **largest site-unit ''n'' the paper declares**, which is the frame it drew from rather than the set it analysed — and for four papers (a phishing corpus, a breach dataset, a password leak, a 5,000-site frame narrowed to 200) it is not even the frame for the deployment part of the work. The analysed figures are in the sections above and in the per-paper prevalence dump on [[provenance:security:authentication]].
 ^ Year ^ Venue ^ Paper ^ Measures ^ Largest n in ''population[]'' ^