18F/identity-idp
View on GitHub ↗ ★ 594 Ruby
Login.gov Core App: Identity Provider (IdP)
33 mentions on Hacker News by 16 people: 0 stories, 33 comments · first 2017-09-08 · latest 2025-03-02
20082026
-
…“login.gov is one of the few government services that as a private sector techie I'm in awe of” [2] https://github.com/18F/identity-idp/
comment by kierangill · 2025-03-02 · in Mark Cuban offers to fund former 18F employees -
…your own auth. I've always pretty much trusted myself to at least get devise setup properly. [1] https://github.com/18F/identity-idp/blob/main/Gemfile#L30
comment by jwcooper · 2025-01-02 · in Rails for everything -
…if a FOIA request would actually compel them to give it to you I believe most of it is open source: https://github.com/18F/identity-idp
comment by marwatk · 2024-08-29 · in Bypassing airport security via SQL injection -
…where he got those numbers. Also, the code that runs Login.gov is (mostly) in the public domain: https://github.com/18F/identity-idp – anybody with a $2/mo VPS could run the code and do their own load testing.
comment by jf · 2023-02-10 · in A year after outcry, IRS still doesn’t offer taxpayers alternative to ID.me -
They fixed that recently: https://github.com/18F/identity-idp/commit/873c71ca8c0cf61d3...
comment by klaussilveira · 2022-02-22 · in IRS to adopt Login.gov as user authentication tool -
…As a result, account recovery looks a lot like re-registration, which I think is a great thing. https://github.com/18F/identity-idp It's built on Rails, and I'm really impressed at the engineering decisions that were made here, from choice…
comment by wyc · 2022-02-22 · in IRS to adopt Login.gov as user authentication tool -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2021-02-01 · in Ask HN: Who is hiring? (February 2021) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2021-01-04 · in Ask HN: Who is hiring? (January 2021) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-12-01 · in Ask HN: Who is hiring? (December 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-11-02 · in Ask HN: Who is hiring? (November 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-10-02 · in Ask HN: Who is hiring? (October 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-09-01 · in Ask HN: Who is hiring? (September 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-08-03 · in Ask HN: Who is hiring? (August 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-07-01 · in Ask HN: Who is hiring? (July 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-06-01 · in Ask HN: Who is hiring? (June 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-05-01 · in Ask HN: Who is hiring? (May 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2020-01-03 · in Ask HN: Who is hiring? (January 2020) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-12-02 · in Ask HN: Who is hiring? (December 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by mfamos · 2019-10-02 · in Ask HN: Who is hiring? (October 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-09-03 · in Ask HN: Who is hiring? (September 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-08-01 · in Ask HN: Who is hiring? (August 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-07-01 · in Ask HN: Who is hiring? (July 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-05-01 · in Ask HN: Who is hiring? (May 2019) -
…serving in the military, and collecting funds awarded through grant programs. Find us on Github: https://github.com/18F/identity-idp The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's…
comment by ab · 2019-04-01 · in Ask HN: Who is hiring? (April 2019) -
…18f (White House's crack website team) has the following: https://login.gov/ Github code here: https://github.com/18F/identity-idp If single-sign on were widely deployed across US Agencies (and tied to financial services / private sector…
comment by dragontamer · 2018-12-10 · in House Oversight Committee Report on Equifax Breach [pdf] -
EDIT: OK, I think I see what's wrong with this analysis: https://github.com/18F/identity-idp/blob/master/spec/service... . They do include Z1 in the data they pass to KMS decrypt. This is because they have XORed the ciphertext with Z1 - so…
comment by aaronbwebber · 2017-09-11 · in Login.gov encryption is badly designed -
…algorithm was designed. HN comment: https://news.ycombinator.com/item?id=15204989 Github Issue: https://github.com/18F/identity-idp/issues/1665 Now I may be misunderstanding their implementation, but it seems to me actually worse than…
comment by zaroth · 2017-09-11 · in Login.gov encryption is badly designed -
…software engineering, why don't we put more thought into it? From the documentation in the README: https://github.com/18F/identity-idp disable_email_sending: ‘true’ enable_load_testing_mode: ‘true’ telephony_disabled: ‘true’ Multiple…
comment by latchkey · 2017-09-09 · in Government launches login.gov to simplify access to public services -
Login Spec Here: https://github.com/18F/identity-idp/blob/master/docs/encrypt... Many aspects of this make no sense to me... so IF this is actually what they are doing... hash(user, password) { salt = CS-PRNG(160bit) s = scrypt(salt,…
comment by zaroth · 2017-09-09 · in Government launches login.gov to simplify access to public services -
…encryption and storage, it appears to use a custom password hash based on SHA256 and scrypt: https://github.com/18F/identity-idp/blob/980c2aa26397f530673... Passwords appear to be stored in the users table in the "encrypted_password"…
comment by jeremyevans · 2017-09-08 · in Government launches login.gov to simplify access to public services -
You don't have to trust them. Its open source https://github.com/18F/identity-idp
comment by dkhenry · 2017-09-08 · in Government launches login.gov to simplify access to public services -
For those interested, development is done in the open here: https://github.com/18F/identity-idp
comment by rhencke · 2017-09-08 · in Government launches login.gov to simplify access to public services