News for hackers. Stuff that matters.

vauth

I if somebody (or some machine) knows your password, they can use it. Just type it in. Voice authentication, knowing the password is not enough, the right person must say the phrase. Recordings don't work (low signal), and previously used recordings can be detected.
>Twilio-powered login to impress clients

Sure, would love to see the designs. That is actually a very similar idea, based on two factor authentication.

>> but it's possible.

Anything is possible.. but if security is your concern, bioauthentication is much more secure than a password. Or proving you are you by.. replying to a text. Anybody could reply to a text, nobody can fake your voice, even if they know your password. Recordings don't generally work (low signal) and are much harder to attain, unless you are the NSA. In which case.. they don't need this anyway.

Security isn't the issue.. usability is. You have to enroll, and there are false negatives... and mainly it is just harder to use than typing.

Yep, basically. Would you use it?
I've been working on a prototype to allow authentication via your voice, instead of a types password. You must know the password phrase, and only if if you say the phrase will it pass. It isn't infallible, but generally more secure than any typed password.

I'm curious, would anybody rather use that vs a typed password? It works via browser (using getUserMedia) or phone call, but the user most enroll first.