News for hackers. Stuff that matters.
Re:'Verified human': Worldcoin users queue up for iris scans by sillysaurusx on Tuesday July 25, 2023 @12:05PM (#36864444)
Imagine choosing a single password that can’t be changed. Sure, you can’t forget it, but if someone ever discovers it, you’re toast.

The fallback is probably 2FA. But we already use 2FA.

Re:'Verified human': Worldcoin users queue up for iris scans by clord on Tuesday July 25, 2023 @12:16PM (#36864670)
Exactly right. Biometrics are more like usernames than passwords. They are on display for all, and immutable. I should be able to change my password. Ideally username too, but not an expectation most sites hold to.

I'd rather not have my username indelibly linked to my identity. for example, I should be able to delegate to my accountant, or let my kids do stuff on my steam account, etc. Not to mention using an indelible ID that is cross-site, meaning i have to use the same username on all suchlike sites and services. The temptation of having that singular id is so great, it is inevitable it will be known to all — including those corrupt governments who will use it for enhancing their power.

I honestly don't see an upside. Combine this with web attestation and I shudder a bit.

Re:'Verified human': Worldcoin users queue up for iris scans by calderknight on Tuesday July 25, 2023 @04:45PM (#36869206)
I don't think biometrics are used as usernames or passwords in the Worldcoin system.

I don't think any such data leaves the Orbs, as far as the Worldcoin system in concerned.

Re:'Verified human': Worldcoin users queue up for iris scans by MattPalmer1086 on Tuesday July 25, 2023 @05:46PM (#36870028)
Yes, exactly. People keep trying to use them for authentication for some inexplicable reason. They should only be used for identification, if at all.
Re:'Verified human': Worldcoin users queue up for iris scans by calderknight on Wednesday July 26, 2023 @05:42AM (#36875099)
It should be used as authentication-of-personhood, but not exactly as a username or password.
Re:'Verified human': Worldcoin users queue up for iris scans by MattPalmer1086 on Wednesday July 26, 2023 @03:08PM (#36883231)
Authentication of personhood does not require individual identification.

I guess "authentication of unique personhood" would though.

Re:'Verified human': Worldcoin users queue up for iris scans by calderknight on Tuesday July 25, 2023 @04:53PM (#36869332)
I don't think I would be toast - I can still have a unique password for each account I have.

Also, I can presumably regain possession of my World ID credentials by visiting an Orb.