News for hackers. Stuff that matters.

A comment on The Devil Is in the Details of Project Verify’s Goal to Eliminate Passwords. Parent comment

Re:The Devil Is in the Details of Project Verify’s Goal to E... by ams6110 on Thursday October 04, 2018 @09:56PM (#18145147)
> No one should ever be putting your biometrics in the cloud.

They are likely already there. Ever had to provide fingerprints for an employment background check or security clearance? They have likely been leaked, along with all your other personal history.

[ Parent | on HN ]
Re:The Devil Is in the Details of Project Verify’s Goal to E... by hirsin on Friday October 05, 2018 @01:27AM (#18145923)
Fair - to be pedantic, no IDP should accept your biometrics as a credential on its own, addressable from anywhere on the internet.

The goal is that an attacker has to steal your physical device and get access to your biometrics, which is significantly more work than spraying aardvark to zebra against an ROPC endpoint.

[ Parent | on HN ]