They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.
You can use fingerprints as a password. They aren't perfect but in many situations they are fine. Security isn't black and white.
Intel Security True Key
21–30 of 113 posts
Re: Intel Security True Key
#22They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.
You can use fingerprints as a password. They aren't perfect but in many situations they are fine. Security isn't black and white.
Seriously, use your eye or fingerprint as a password and there is someone ruthless enough to remove them from your body.
Re: Intel Security True Key
#23Re: Intel Security True Key
#24I'm rather concerned about the face recognition part and how easily that might be fooled. Has anyone tried that? It's an interesting take on a password manager though, I do like the second factor through an additional device before it grants access.
Although not this particular face recognition. I managed to fool face recognition passwords in the past with a simple photograph of the person. As you would expect it works perfectly fine.
This is still far from perfect though; a truly determined bad actor could create a passable 3D model, or even a face mask, and probably still fool the sensor. It just takes more work. The whole point of passwords is that no one can know them but the person intending to use them. Using a publicly visible part of my body is just asking for trouble.
Re: Intel Security True Key
#25Edit: Face recognition is even easier. Iris scanners are the only sure way to recognize someone.
Re: Intel Security True Key
#26Can the mods or OP change the url to the english version? https://www.truekey.com/
Awesome.
Re: Intel Security True Key
#27True Key makes use of the Intel Management Engine (IME). It gives a hint at what Intel is up to with the IME. One of the intended uses is "identity protection", storing secrets like e.g. biometric data in the realm of the IME, and to ultimately get rid of passwords. Considering the security concerns regarding the IME, I doubt that it is a good idea to hand your passwords over to Intel (ME). At least I don't want to s…
Interesting that Apple is doing similar things with the embedded ARM stuff in the new touchbar MBPs.
Re: Intel Security True Key
#28Earlier quoted context omitted.
Interesting that Apple is doing similar things with the embedded ARM stuff in the new touchbar MBPs.
The thing is that Apple actually has a pretty good track record for security and not violating the privacy or integrity of customers' products. I have a lot more trust in Apple doing this correctly. I'd be fine with Intel taking on secure computing, but there's been some pretty bad stuff with the IME (like sending data to the internet outside of user control when using intel NICs), so I'm skeptical of this approach (…
Re: Intel Security True Key
#29They never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.
You can use fingerprints as a password. They aren't perfect but in many situations they are fine. Security isn't black and white.
We at startup xyz take security seriously. We regret to inform you that on the night of 1st December 2016 our database was compromised. The database contained your name, address and fingerprint data.
Please see a plastic surgeon about resetting your fingerprints at as soon as possible.
Thank you, Startup Xyz