DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About Privacy
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
Privacy Policy
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

One Million Passports Leaked Online

· Bruce Schneier · June 26, 2026, 11:10 a.m.
data collection leaks passports Security authentication credentials identity-verification
Summary
A database containing nearly a million passports has been leaked online due to vulnerabilities in low-value authentication systems, specifically for verifying IDs at cannabis dispensaries. This incident highlights the risk of misusing high-value credentials in less secure contexts.
Read full post on www.schneier.com →
MORE POSTS LIKE THIS
What Is Tool Injection in AI Agents?
Govind Malviya · Mar 9, 2026
engineering Security
Never Share Your Password Again — The OAuth 2.0 Solution
Stack Overflow · Nov 9, 2026
cc-by-sa contributed
Feature Request: Make Phone Verification Optional When Secure Alternatives Are Available
Community Openai · Nov 1, 2026
Security user-experience
How to Build Passkey Authentication with WebAuthn, Next.js and NestJS
freeCodeCamp.org · Oct 27, 2026
authentication passwordless-authentication
JWT Explained: What a JSON Web Token Is and How It Breaks
Aleksei Aleinikov · Oct 26, 2026
JWT JSON Web Token
Passkeys are a trap. No they're not!
Birchtree · Oct 23, 2026
links Security
Discover more posts →
AUTHOR
BLOG POST FEATURED ON

Placeholder image
Hacker News

46 points

Placeholder image
r/NowInCyber

1 points

Add this plugin to your blog
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google
By continuing, you agree to our Privacy Policy.