News for hackers. Stuff that matters.
Re:Amazone One palm authentication discontinued by cmiles8 on Wednesday January 28, 2026 @04:12PM (#46801589)
The tech here was good but the product implementation was terrible. These scanners just showed up randomly in places and just sat there unused.

I literally both saw them all over and never actually saw anyone use it.

No clear onboarding pathway, no explanation as to what it did or why use it, no clarity on what happens to the data. Just a box sitting there.

It was as if all the focus was on the tech and nobody bothered to think about how to actually deploy a product to market.

Re:Amazone One palm authentication discontinued by Izikiel43 on Wednesday January 28, 2026 @04:29PM (#46801800)
I used them in whole foods all the time
Re:Amazone One palm authentication discontinued by Eric_WVGG on Wednesday January 28, 2026 @04:46PM (#46802019)
sincere, non-trolling question: Why?

You clearly saw some value in the convenience. Smartphone and smartwatch NFC offers that convenience everywhere. Even setting up palm authentication feels like unnecessary work.

Re:Amazone One palm authentication discontinued by atkailash on Wednesday January 28, 2026 @05:04PM (#46802203)
I used it at Whole Foods cause it did my prime code and charged me at the same time without digging my phone out of my pocket but also my Whole Foods has bad reception so it’s annoying to use
Re:Amazone One palm authentication discontinued by Eric_WVGG on Wednesday January 28, 2026 @06:00PM (#46802935)
You don't need reception of any kind to do an NFC payment, as long as the terminal has network access (even through ethernet).

the Prime code thing is a good point tho

Re:Amazone One palm authentication discontinued by dangus on Wednesday January 28, 2026 @08:05PM (#46804295)
Automatic loyalty cards are already supported in Apple Pay and I assume Google Pay as well.
Re:Amazone One palm authentication discontinued by llsf on Wednesday January 28, 2026 @08:44PM (#46804611)
In theory, but not in practice. The devil is in the details. Yes, Apple wallet and Google wallet allows to store loyalty cards. And those cards can be summoned using respectively VAS and SmartTap.

But... while all payment terminals are compatible to VAS and SmartTap, very few have the firmware and a POS that can make sense of it. So, in practice, beside Walgreens and maybe CSV, it is not much adopted.

Re:Amazone One palm authentication discontinued by stevewodil on Wednesday January 28, 2026 @06:07PM (#46803016)
Prime discounts were automatically applied if you use the credit card on your Amazon account I thought
Re:Amazone One palm authentication discontinued by closeparen on Wednesday January 28, 2026 @10:48PM (#46805599)
The scanners were there before this.
Re:Amazone One palm authentication discontinued by smoghat on Thursday January 29, 2026 @09:40AM (#46810790)
I used Amazon One at my workplace all the time, but I only used it at the self-checkout line since I'd rarely get more than a few items, and the lines are shorter at this crowded neighborhood WF. There, I would scan all my items and use my palm to both log in to Prime and pay. Given that I would be scanning my own items, I much preferred it to phone or watch, as I didn't have to fish them out after scanning.

I am surprised nobody has mentioned the real joy of checkout at Whole Foods, which is that there is no annoying, incessant voice asking every self-checkout shopper, "Have you scanned your rewards card yet?" and "Please complete the transaction on the pin pad." It must be sheer torture working all day with those going off constantly.

Re:Amazone One palm authentication discontinued by vostrocity on Wednesday January 28, 2026 @05:10PM (#46802283)
I like to go running with nothing on me besides a house key, and it's useful to be able to stop by Whole Foods after the run and buy a snack without a phone, watch, or wallet.
Re:Amazone One palm authentication discontinued by octoberfranklin on Wednesday January 28, 2026 @08:14PM (#46804372)
Wear an NFC ring on your finger.

Unlike your palmprint, you can get a new ring with a new private key if yours is compromised.

Re:Amazone One palm authentication discontinued by llsf on Wednesday January 28, 2026 @08:49PM (#46804646)
It all boils down to the tradeoff between convenience and security. I don't think it is particularly easy to replicate a living hand with all the blood vessels. And it is not particularly easy to get a NFC ring with a secure element compatible with payment terminals.

I thought that the engineering team at Amazon did a great job with Amazon One. I wish someone could pick up the tech and carry on.

Re:Amazone One palm authentication discontinued by octoberfranklin on Wednesday January 28, 2026 @10:12PM (#46805309)
Yeah 25 years ago people said stuff like that about fingerprint scanners, and then they got hacked by literal gummy bears:

https://www.theregister.com/2002/05/16/gummi_bears_defeat_fi...

For 2020's-era palm scanners you don't have to replicate a 3D hand -- just like a video chat doesn't replicate my 3D face. You just have to emit photons (some of them infrared, yes) in the correct pattern. The hack won't look like a 3D-printed hand, it'll look like a display panel that works beyond visible wavelengths. It'll probably be some device developed for a totally unrelated market, and then one day "whoops, all those palm scanners are 0wn3d" (natürlich auf Deutsch) will be a talk title at CCC.

But all this is academic. The real problem with biometrics is that when your password is a body part, you can't change your password.

Re:Amazone One palm authentication discontinued by llsf on Thursday January 29, 2026 @12:26AM (#46806147)
I agree and I get it. But at the same time, it is only used for payment and discounts at grocery store. Payment with a card is even less secure here in US. So, I do not think that Amazon Go was particularly unsecured since it was just for credit card payment.

If someone manages to replicate my pulsing blood vessels from my hand and trick the scanner, that would be fine. I would dispute the purchase, and the store would not even pull the camera footage, and just refund.

Amazon Go was not used to hold access to bank accounts or crypto wallets. I think it was a good technology and balance between convenience and security, for the purpose (grocery loyalty and payment).

A twin or even sometimes a relative (son and mother) can open an iphone and its banking apps using the facial recognition. That is more concerning to me than Amazon Go palm scanning for groceries.

Re:Amazone One palm authentication discontinued by octoberfranklin on Thursday January 29, 2026 @04:41PM (#46817045)
> Payment with a card is even less secure here in US.

This is not even remotely true. Credit card chips do real cryptography.

It's been a decade since I saw a card terminal without a chip reader, except for parking meters and soft drink vending machines.

Re:Amazone One palm authentication discontinued by llsf on Friday January 30, 2026 @12:20AM (#46820812)
Sure, but that piece of plastic/metal can be stolen or misplaced. Anyone can use my credit card then.
Re:Amazone One palm authentication discontinued by bombcar on Wednesday January 28, 2026 @05:21PM (#46802415)
A powered door lock and keypad and you won't even need the house key!
Re:Amazone One palm authentication discontinued by fragmede on Wednesday January 28, 2026 @05:50PM (#46802806)
A richer zip code and safer streets and you won't need either!
Re:Amazone One palm authentication discontinued by hubber on Wednesday January 28, 2026 @07:02PM (#46803629)
I'm in a poor but 'not diverse' area and I don't even know where my keys are. No need for locks around here.
Re:Amazone One palm authentication discontinued by xerox13ster on Thursday January 29, 2026 @06:50AM (#46808949)
Mayberry’s Mayberry ‘til it ain’t no more. Don’t matter how far out in the sticks you are. Yer askin for trouble.

Just ask the Clutter family. Oop, you can’t.

Re:Amazone One palm authentication discontinued by matthewdgreen on Wednesday January 28, 2026 @08:52PM (#46804674)
I've consciously reduced my pocket contents from car keys+wallet+phone to driver's license+phone. I'd love to be able to get rid of the phone sometimes.
Re:Amazone One palm authentication discontinued by reaperducer on Wednesday January 28, 2026 @10:44PM (#46805559)
Most of my lunch hours, I take nothing more than a five dollar bill.

A slice of cheese pizza is $2, and a bottle of water is $1. Then I sit in the park and watch life happen in front of me.

Very therapeutic.

Re:Amazone One palm authentication discontinued by Izikiel43 on Wednesday January 28, 2026 @05:24PM (#46802453)
Convenience?

Set up once with the CC with rewards for groceries, hover hand 2 seconds, done.

Apple Pay in the phone or watch are super convenient as well, but they take just a tad bit more of time between selecting the menus in the touch screen for pay options, and then selecting the matching CC.

I save like 30s? Possibly. Is this tech overkill? Most likely.

Re:Amazone One palm authentication discontinued by efficax on Thursday January 29, 2026 @11:00AM (#46811974)
After they showed up a year or two ago, I never saw a single person use them in the checkout line. Bad vibes, giving my biometrics to Amazon, and I think that's how most people felt
Re:Amazone One palm authentication discontinued by toephu2 on Wednesday January 28, 2026 @04:43PM (#46801986)
What problem was it solving though? NFC contactless payments is already pretty fast and convenient. I feel like Amazon One Palm was invented to solve for a problem we didn't really have. Thus the failure.
Re:Amazone One palm authentication discontinued by michaelt on Wednesday January 28, 2026 @05:10PM (#46802271)
There are certain enterprise applications that particularly like biometrics.

Gym entry system where you can't share your entry fob with a buddy

Corporate access control system, no need for a guard to deal with people who've forgotten their cards.

Time clock where it's impossible for workers to clock other people in/out.

Re:Amazone One palm authentication discontinued by bhhaskin on Wednesday January 28, 2026 @05:58PM (#46802913)
Sure, but that isn't what it was being used for, and all of those places already have access control systems.
Re:Amazone One palm authentication discontinued by websap on Thursday January 29, 2026 @05:42AM (#46808315)
My gym in Seattle used this, and it was great. I often forgot bringing my fob, and not needing to explain to the frontdesk person was fantastic.
Re:Amazone One palm authentication discontinued by xerox13ster on Thursday January 29, 2026 @06:30AM (#46808784)
Also in Seattle and at my gym I scan a barcode off my phone and keep my personal biometric data secure. It’s great. Fantastically, no need to explain anything to a front desk person, either.

I’m team “solution in search of a problem”

Re:Amazone One palm authentication discontinued by llsf on Wednesday January 28, 2026 @08:39PM (#46804566)
The fact that you do not have to pull a card or even your phone could make the transaction faster. And it would link to my Prime account so I could get my discounts/points. All with just me showing my palm.

Using your palm print (and actually blood vessels network) could be also more secure than tapping a card (NFC contactless).

I enjoyed using the technology. I did test other biometric payments like with face at the Intuit Dome in LA. But it felt more creepy and far less secure... as I was walking by some gates would open and some random person could enter as me... and possibly charge my linked payment. Using the hand with Amazon Go felt safer.

Wondering if Amazon would be willing to sell the technology, as I could see being deployed in lots of retail stores. The fact that it was made by Amazon, likely prevented to sell the technology to other retailers. Someone like Verifone, Ingenico or even a POS like Micros should go after the technology...

Re:Amazone One palm authentication discontinued by jcrawfordor on Wednesday January 28, 2026 @09:14PM (#46804868)
I don't know that there is much technology to sell, palm vein imaging is decades old in the access control industry. The reason you don't see it anywhere is because it was already a commercial failure in that application, by the end of the 1990s.

Amazon was even trying to sell the technology for access control applications, but their sales material were remarkably devoid of any reason to choose it over other biometrics.

Re:Amazone One palm authentication discontinued by wiml on Wednesday January 28, 2026 @10:20PM (#46805367)
Out of curiosity, why did it fail in that market?
Re:Amazone One palm authentication discontinued by jcrawfordor on Thursday January 29, 2026 @12:04AM (#46806017)
Biometrics were a very crowded market during the 1980s and 1990s when it was a newer idea and electronics were starting to make things practical. Lots of ideas were tossed around before the industry pretty well consolidated on fingerprints with a side of iris imaging and hand geometry in some more security-sensitive niches. It mostly came down to cost: fingerprint scanners, even before the modern capacitative type, came down in price much faster than other types of imaging (visible rather than IR sensors, glass platen allowed for fixed focus, etc). The widespread use of fingerprint comparison in criminal forensics also mean that there's an older and stronger academic literature on fingerprint comparison, whereas other types of biometric sensors often involve proprietary match algorithms and you have to rely on the vendor's assertions about reliability.

Of course everything around cameras has come down in cost tremendously since then, so palm imaging is probably reasonably priced now, but it lacks a clear enough advantage over better-established methods for anyone to switch over. Besides, just the fact that you have to position your palm the way you do makes it difficult to install them in most practical door situations. Fingerprint sensors turn out to be very compact and fairly intuitive to use.

I scoured Amazon's sales materials around Amazon One very closely, because I found it fascinating that they were seemingly trying to revive the technique. I was surprised they were doing it as a payment device, but it made more sense when I found materials (I think old FCC filings) that suggested that it was originally designed as an access control product and perhaps "pivoted" to payments later. The strangest thing about it though was how unconvincing the sales materials were, it felt like they were really grasping at straws for a reason to select it over other options.

From what I could find it doesn't appear to have been an acquisition; the regulatory paperwork was all filed under some LLC but it seemed to just be a front company for Amazon which is fairly common for that kind of thing. So my best guess is that it was a pet project of someone influential enough to burn some R&D on it, and maybe pivoting to payments and putting them in Whole Foods was thought to maybe be the hail Mary that would turn it into a real business.

The actual integration with the PoS in the stores was clumsy too, they Velcro'd an NFC antenna to the side of the credit card terminal to use to make payments by proxy card. I originally got obsessed with it because I was trying to ID the suspicious device Velcro'd to the payment terminals at Whole Foods!

Re:Amazone One palm authentication discontinued by baby_souffle on Wednesday January 28, 2026 @10:25PM (#46805410)
> The fact that you do not have to pull a card or even your phone could make the transaction faster.

My watch was already there for those situations where literal seconds matter.

Ironically, they were 'retrofitted' onto the payment terminals at the local whole-foods. They used the same "magnetic stripe simulator" tech that samsung was shipping in their phones for a few years about a decade ago.

If you had jumped through the hoops to set it up to associate a palm print with payment details, the system is still just swiping a virtual card in the payment terminal which is objectively less secure than the chip/nfc that has more or less replaced the old mag stripes.

Re:Amazone One palm authentication discontinued by driverdan on Wednesday January 28, 2026 @10:09PM (#46805287)
> The fact that you do not have to pull a card or even your phone could make the transaction faster.

Oh boy, it saves you 5-10 seconds. Or better yet, pull your card out while waiting in line so it's ready when you go to pay.

Re:Amazone One palm authentication discontinued by reaperducer on Wednesday January 28, 2026 @10:32PM (#46805466)
The fact that you do not have to pull a card or even your phone could make the transaction faster.

Except they didn't in the real world.

The only place I ever saw these was at Whole Foods, and the store's POS terminals don't let you tap or palm until all items are rung up and there's a total available.

Usually when the cashier is down to the last two items, I have my card already out and hovering over the chip reader. The transaction completes in under two seconds.

Palm scanning is slower than any payment method other than cash or checks.

Re:Amazone One palm authentication discontinued by jnaina on Wednesday January 28, 2026 @10:02PM (#46805232)
perhaps Amazon needs to rein in the rapid proliferation of low-value six-pagers and the resulting two-pizza teams.

solutions that often look brilliant on paper but are poorly executed or inadequately supported in practice (Amazon GO, Fire Phone, Dash Buttons, Astro, Amazon Wallet, etc, etc)

Re:Amazone One palm authentication discontinued by qwertyuiop_ on Wednesday January 28, 2026 @11:13PM (#46805736)
The said problem statement as described in Amazon 6 pager

Problem Statement Traditional authentication methods like ID cards, passwords, and physical keys are cumbersome, prone to loss or theft, and inefficient in high-traffic environments. In retail, healthcare, and enterprise settings, these lead to delays, security vulnerabilities, and increased operational costs. Biometric alternatives like facial recognition can raise privacy concerns and vary in accuracy due to lighting or masks. There’s a need for a secure, frictionless system that leverages unique, non-intrusive biometrics while giving users control over their data.

Re:Amazone One palm authentication discontinued by altairprime on Thursday January 29, 2026 @03:20AM (#46807241)
It solved Amazon’s blind spots regarding detailed purchase information and biometric collection in a way that could give them datasets from merchants who weren’t otherwise providing data to Amazon. No intrinsic benefits at all to consumers that I know of, though; presumably leading to zero adoption and why they ended it.
Re:Amazone One palm authentication discontinued by burnte on Wednesday January 28, 2026 @05:51PM (#46802827)
I saw them show up without explanation, but I don't think that's the reason they were unused. If you look at it, it says what it is and to just hold your hand over it to use it, so it's very easy to learn to use and enroll.

I believe the problem was that people simply don't want Amazon to own copies of our finger/hand prints. I intentionally avoided the scanners because of that reason.

This was always doomed to fail, this was almost as dumb an idea as the Facebook Portal. Yeah, the tech is there, and works great, but just like no one wanted Facebook to have a 24/7 camera in their house, I don't think people want to give Amazon their biometric data.

FB Portal was rolled out right after all the media reporting about Cambridge Analytica and how utterly untrustworthy Facebook really was at it's code. A friend of mine was PM on it and I felt terrible for him because as excited as he was, I knew it was always going to fail.

"Do you have chickens in a coop? Hire Chicken Eating Foxes to watch them for you! They won't eat your chickens!" Note: Chickens may be eaten at anytime and will probably be eaten instantly.

Re:Amazone One palm authentication discontinued by matthewdgreen on Wednesday January 28, 2026 @08:50PM (#46804651)
I don't want Amazon to own my palm print, but I also love using weird payment technology. So I would have probably been dumb enough to sign up at Whole Foods if I'd noticed that was an option.
Re:Amazone One palm authentication discontinued by baby_souffle on Wednesday January 28, 2026 @10:27PM (#46805425)
> I believe the problem was that people simply don't want Amazon to own copies of our finger/hand prints. I intentionally avoided the scanners because of that reason.

Yep. And for this privacy risk, I can't even use my palm anywhere but whole foods.

Re:Amazone One palm authentication discontinued by justonceokay on Wednesday January 28, 2026 @10:36PM (#46805490)
As a business owner you had to pay a monthly subscription to even have it on your counter! A joke product for unserious people