Attacks against authentication