PostNL and Gaslicht.com have stopped using the iDIN verification service following discoveries of address spoofing vulnerabilities. Research showed the authentication mechanism could be exploited to manipulate user address data, creating significant privacy risks. Other organizations relying on this identity service may also be exposed to similar abuse.
READ THE ORIGINAL ARTICLE AT TWEAKERS.NET →