Re:Claimed AT&T hack of 70M customer records including SSN, ...
by EvanAnderson on Friday August 20, 2021 @01:43PM
(#28249038)
This all sounds very reasonable, albeit I'm partial to chip-and-PIN for preventing unintentional validation and to render the token useless if lost or stolen. The ring form factor doesn't lend itself to PIN entry, but otherwise it sounds reasonable compelling. (Granted I can't make myself wear a ring without taking it off, fidgeting with it, and ultimately losing it. I've tried, failed, and lost three as a result.)
[ Parent
| on HN ]
Re:Claimed AT&T hack of 70M customer records including SSN, ...
by dredmorbius on Friday August 20, 2021 @02:28PM
(#28249646)
An NFC ring can still require secondary authentication (e.g., pin) in some contexts. That would be application-dependent.
There are cases (e.g., mass-transit turnstiles) where this isn't desirable --- the intent is to maximise throughput. (The quesiton of whether or not validating or fares are a net benefit is also open.)
For a more secure facility, or payment system, tag + pin (and potentially other identifiers) would be preferred.