alt Hacker NewsPeople are seriously underestimating the impact of these leaks.
I've had government websites authenticate me by CPF and birth date on my first login. These government people made this and thought there was nothing wrong with it, it's literally in production right now.
Replies
drdexebtjl • yesterday at 6:03 PM
Name and shame the government website that does this.
➕ show 1 reply
alala-lala-lon • yesterday at 5:56 PM
[dead]
You are likely misunderstanding what happened. Government websites usually let you use your gov.br app to authenticate and that uses your CPF as username. But it has a hardware stored certificate that identifies you, you don't need a password because it's presenting a cryptographic certificate instead, which is much, much more secure.