1
美国身份验证巨头 IDScan 承认数据泄露，超 1.5 亿张驾照信息被盗
IT之家 9 月 10 日消息，美国知名身份验证服务商 IDScan 本月（9 月 4 日）在官网承认，公司近期遭遇一起数据泄露事故。 IDScan 表示，黑客组织从公司的云端服务器窃取了驾照信息， 用户姓名、驾照号码、护照号码等信息遭到泄露 。 同时，该公司于 9 月 1 日前后收到数据被盗信息，…
2
Theory-Grounded Evaluation Exposes the Authorship Gap in LLM Personalization
用作者身份验证理论评估LLM风格个性化，揭示模型模仿个人文风时的真实差距与评测盲点。
arXiv:2604.26460v2 Announce Type: replace Abstract: Stylistic personalization - making LLMs write in a specific individual's style, rather than merely…
3
4
Namecheap Gave My Account to an Unverified Third Party Just Because They Asked
13年老客户账户被未经核实的第三方通过简单询问密码重置接管，域名注册商安全漏洞曝光
I’ve been a NameCheap customer for 13 years. I’ve also helped out an old college club paying for a .com they use (that is registered to me under my na…
5
Google will now let you sign in to your account with a selfie video
Google用自拍视频验证身份，多层级安全保障防伪造。
The tech giant says selfie videos give users more options to sign in if they're ever locked out or don't have access to their usual phone or computer.
6
谷歌现在允许用户通过自拍视频登录账号
谷歌用动态自拍视频替代传统密码验证，提升账号恢复安全性
IT之家 7 月 23 日消息，谷歌正在推出一种新的账号登录和恢复方式，当用户无法使用传统找回方式时，可以通过自拍视频验证身份重新登录账号。这项名为“自拍视频（Selfie Video）”的新功能允许用户提前录制一段简短的视频，在之后需要恢复账号访问权限时，用于身份验证。 谷歌表示，这项功能是一种备…
7
An AI agent exported a patient record. Your logs can't say who told it to.
AI代理导出患者记录后无法审计谁下的指令？身份委派令牌缺失关键溯源信息，安全隐患亟待解决。
You put an LLM agent into production. It runs under a service account or a shared API key, because that's how you give software credentials. It reads …
8
React Native + Expo JWT Auth with FastAPI — A Complete Working Example
从零搭建Expo移动端与FastAPI后端的JWT认证，并附完整可运行的代码示例，手把手教你处理access/refresh token与OAuth2集成。
Most FastAPI JWT tutorials stop at "here's how you issue a token" and never cover the parts that actually break in production: where to store the toke…
9
When an agent can prove it is Claude
当AI代理无法自证身份，网站只能在封锁与信任间艰难选择，这篇剖析了背后安全困境的硬核技术文值得一读。
A site that wants to let an AI agent act has a problem it rarely says out loud. It cannot tell which agent is actually at the door. A user-agent strin…
10
Anthropic says Claude may want to see your ID
Anthropic更新政策，Claude或要求用户提供身份证明，隐私与监管再引热议
Claude's chatbot may ask to verify your age and identity "in certain circumstances," such as with a passport or driver's license, according to a priva…
11
Identity verification on Claude
Claude身份验证所需材料及隐私保护说明，简单实用，保障信息安全。
https://old.reddit.com/r/ClaudeAI/comments/1ubm53n/official_... Comments URL: https://news.ycombinator.com/item?id=48618455 Points: 299 # Comments: 25…
12
微软推进 Authenticator 身份验证从点击改为输入，猜中概率从 33% 降至 1%
微软Authenticator将验证方式从点击改为手动输入，猜中概率从33%骤降至1%，大幅提升账户安全性。
IT之家 6 月 19 日消息，科技媒体 Windows Central 昨日（6 月 18 日）发布博文，报道称微软正逐步调整 Microsoft Authenticator 应用登录页面， 将原有的三选一点击验证改为手动输入两位数字。 IT之家援引博文介绍，这项调整已陆续部署到企业与教育账户中，…
13
State of AI and Identity Report
调查显示AI安全信心与实际安全事件严重脱节，你的组织可能也存在漏洞。
Article URL: https://fusionauth.io/blog/2026-ai-identity-report Comments URL: https://news.ycombinator.com/item?id=48470554 Points: 1 # Comments: 0
14
Show HN: Continuity-auth – Respect-weighted rate limits for the open web
用设备连续性证明替代验证码，实现对开放网络中人机共存的智能速率限制，尊重而非惩罚真实用户。
Identity is a missing piece for managing security in cyberspace where agents co-exist with humans. Traditional methods of managing open-access like ca…
15
Building a Secure Future with Zero Trust Security Architecture
零信任安全架构核心原则解读，用OAuth 2.0实践"永不信任，始终验证"的落地方法。
Building a Secure Future with Zero Trust Security Architecture As a Full Stack Engineer specializing in DevOps, AI Infrastructure, and Cloud, I've see…
16
MFA verifies who logged in. It has no idea what they do next.
MFA并非万能：82%攻击无需恶意软件，会话令牌已成漏洞之王。
Every MFA check passed. Every login was legitimate. The compliance dashboard was green across every identity control. And the attacker was already ins…