Attacks · By business pattern
Ceremony and Pass+ patterns against human-facing attacks: phishing harvests, keylogging, and ambient password reuse — denied by one-shot, request-bound proofs.
~6 min readDeep-link: Phishing
Human login attackers want something that works again later: a password, OTP, recovery factor, or ceremony fragment that converts into a second session on another device. The estate question is whether the product still mints ambient authority from human input.
Passwords, OTPs, and many passwordless recoveries still center on reusable or device-escrowed secrets. Keyloggers and phish kits exist because those secrets pay. Ambient human auth trains users to type lasting value into forms.
Cognitive and Pass+ ceremonies produce one-shot bearings. There is no lasting credential tray to phish into another session; keylogged input is spent work; endpoint binding rejects retargeted fragments. Deep-link the credential families for dual-plate denial detail — this pattern page is the buyer lens.
Ceremony-UX residual risks remain deferred from public Attacks nav. Mechanism denial here is conversion failure for ambient harvest, not a claim that humans never err.
Phish harvests reusable secrets
How to read: lure tray left; harvest-and-reuse ambient win right. Takeaway: harvest equals lasting credential.
Human-facing ambient success is the harvested string that logs in elsewhere.
Nothing reusable to harvest
How to read: lasting-credential myths fail; ceremony fragment is request-bound. Takeaway: no lasting credential; binding holds.
One-shot fragments and binding close the harvest-to-caller path; read keylogging next for typed-input denial.
Immune to phishing.ValidatedNo reusable credential exists to harvest; endpoint_id binding means a relayed proof fails on any other route.Holds under the reference architecture
Immune to keylogging.ValidatedNothing typed has lasting value; bearings are one-shot and already burned by the time an observer could reuse them.Holds under the reference architecture
No lasting credential to harvest.
Typed input is not a password.
Possession ≠ lasting authority.
This essay critiques the systemic problems not addressed by contemporary passwordless trends (passkeys, FIDO tokens, and mobile MFA apps). While hardware-bound credentials reduce phishing and stuffing for interactive users, the author argues they bind users to specific devices and vendor escrow or sync services, ceding sovereignty over storage and recovery.
This accessible paper explains how the ENI6MA / Rosario–Wang Proof uses cognitive methods to protect the witness (the hidden information that proves identity or knowledge) without exposing it during authentication. Minds (human or artificial) perceive patterns, map symbols to private meanings, and make fast membership decisions; ENI6MA builds an interactive ceremony around those abilities.