Live data from Hacker News

Intel Security True Key

intel.com

11–20 of 113 posts

Re: Intel Security True Key

#11
post #7

I'm rather concerned about the face recognition part and how easily that might be fooled. Has anyone tried that? It's an interesting take on a password manager though, I do like the second factor through an additional device before it grants access.

Although not this particular face recognition. I managed to fool face recognition passwords in the past with a simple photograph of the person. As you would expect it works perfectly fine.

Re: Intel Security True Key

#12
True Key makes use of the Intel Management Engine (IME). It gives a hint at what Intel is up to with the IME. One of the intended uses is "identity protection", storing secrets like e.g. biometric data in the realm of the IME, and to ultimately get rid of passwords.

Considering the security concerns regarding the IME, I doubt that it is a good idea to hand your passwords over to Intel (ME). At least I don't want to support this technology by using apps that utilize the IME.

To read up on the IME there is a free book by one of the developers on it...

http://link.springer.com/book/10.1007%2F978-1-4302-6572-6

Inside is an entire chapter on Intel's identity protection.

Re: Intel Security True Key

#13

>AES-256, one of the strongest encryption algorithms available Hmm... I'd take 4096-bit GPG over this any day. I rather like using pass[0] [0] https://www.passwordstore.org/

Little do you know that gpg uses a symmetric cipher like AES-128, only encrypting the symmetric key with your asymmetric RSA keys.

Re: Intel Security True Key

#15
They never seem to understand:

Your fingerprint like your face can be the username, but never the password.

Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.

Re: Intel Security True Key

#16
This is an adorably bad idea:

+ As fdik said above, you can't change your fingerprint or face easily, and it's always public

+ Face recognition and fingerprint scanning are not robust against spoofing — there are known ways to circumvent both

+ You can be compelled to authenticate a biometric without a warrant

Don't use biometrics as a password; use them as a username.

Re: Intel Security True Key

#17
post #15

They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.

You can use fingerprints as a password. They aren't perfect but in many situations they are fine.

Security isn't black and white.

Re: Intel Security True Key

#18
post #15

They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.

You can use fingerprints as a password. They aren't perfect but in many situations they are fine. Security isn't black and white.

> You can use fingerprints as a password.

Provided you have them, medical amputations of limbs is a thing that happens.

Re: Intel Security True Key

#19
post #15

They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.

Comparable to a social security number, but a SSN which you rubber stamp upon literally everything you touch. I make this analogy to illustrate the ridiculousness of both.

Re: Intel Security True Key

#20
post #12

True Key makes use of the Intel Management Engine (IME). It gives a hint at what Intel is up to with the IME. One of the intended uses is "identity protection", storing secrets like e.g. biometric data in the realm of the IME, and to ultimately get rid of passwords. Considering the security concerns regarding the IME, I doubt that it is a good idea to hand your passwords over to Intel (ME). At least I don't want to s…

Interesting that Apple is doing similar things with the embedded ARM stuff in the new touchbar MBPs.
Post reply on HN