authentication failure
2 posts
Article
The word "toad" hijacked a Chrome VPN
A single keyword handed full control of Chrome's most popular VPN extension to any website. The failure is trust by string, not a bug.
Article
Face ID was never the control
A reported Face ID bypass via avatar collapses the liveness assumption. Every downstream control trusting the boolean inherits the failure.