Amazon One – Palm recognition for Amazon Go

Post by filoleg » Tue, Sep 29, 2020, 8:41 PM UTC

ben_w wrote: post #14

alexmat wrote: post #12

Earlier quoted context omitted.

From the FAQ, it seems like this is not as invasive as fingerprints: "We selected palm recognition for a few important reasons. One reason was that palm recognition is considered more private than some biometric alternatives because you can’t determine a person’s identity by looking at an image of their palm."

If that is understood to mean palm prints are less invasive than fingerprints , then it also means palm prints are less good at correctly identifying users. I read that part of their statement as a comparison of data privacy (not invasiveness) with face recognition. I think the contactless part was about invasiveness.

Post by m1gu3l » Tue, Sep 29, 2020, 9:32 PM UTC

ballenf wrote: post #138

yalogin wrote: post #74

So far what Apple and other companies did is to keep the biometric auth tied to the device and not let leak out. Now Amazon is saying leaking it is the feature. They are using the hand as the identifier, so the biometric id is what is used to identify a person, not an email address, not a random number or a handle. The biometric data that cannot be changed ever is the identifier. It's very troubling. - The privacy an…

There's also this gem in the FAQs: > If I decide I don’t want to use Amazon One any more after signing up, can I delete my biometric data? > Yes, you can request to delete data associated with Amazon One through the device itself or via the online customer portal at one.amazon.com. We believe customers should always be in complete control of when and where they use the service, and we designed Amazon One with this in…

Post by TiltMeSenpai » Wed, Sep 30, 2020, 4:58 AM UTC

underyx wrote: post #5

neilalexander wrote: post #3

> We selected palm recognition for a few important reasons. One reason was that palm recognition is considered more private than some biometric alternatives because you can’t determine a person’s identity by looking at an image of their palm. > When you hold your palm over the Amazon One device, the technology evaluates multiple aspects of your palm. No two palms are alike, so we analyze all these aspects with our vi…

Sounds like palm prints are even easier to harvest from public figures than fingerprints. Take a photo at a speech, you can likely make a silicone mold replicating their palm, and you get to shop for groceries with their card.

Post by immmmmm » Wed, Sep 30, 2020, 8:15 AM UTC

nakagin wrote: post #81

immmmmm wrote: post #28

Researcher in biometrics working on contactless palm/finger recognition here. 1) A new innovation ok. People have been doing that for more than a decade, my group included. 2) Given the sensors look, it's almost certainly near infrared (NIR) camera, probably 850nm illumination and the dark surface is a NIR filter. 3) It certainly capture a mix between palm veins (850nm quite absorbed by de-oxygenated hemoglobin) and…

5) Are there any anti-spoofing measures already out there? It sounds like if there are, they can be easily bypassed...

Post by yencabulator » Wed, Sep 30, 2020, 11:38 PM UTC

jacobn wrote: post #128

yalogin wrote: post #74

So far what Apple and other companies did is to keep the biometric auth tied to the device and not let leak out. Now Amazon is saying leaking it is the feature. They are using the hand as the identifier, so the biometric id is what is used to identify a person, not an email address, not a random number or a handle. The biometric data that cannot be changed ever is the identifier. It's very troubling. - The privacy an…

Also, what about false identifications? With Face/TouchId it’s authentication, not identification (as there’s only one identity associated with the device). What’s the fallback here for “twin palms”? I guess those unlucky people will have to swipe in using traditional methods?