Live data from Hacker News

Amazon One palm authentication discontinued

amazonone.aws.com

171–180 of 188 posts

Re: Amazon One palm authentication discontinued

#171

This seemed like a bad idea to me from the beginning. Giving personal biometric details to a monster corporation is a nonstarter for both techies and normies.

I call it plausible deniability.

My fingerprints and palmprints have gone through so many biometric studies through multiple colleges and I know they’ve done experiments with copying and making false biometrics from some of their study samples.

What’s not to love?

Re: Amazon One palm authentication discontinued

#173
post #39

Earlier quoted context omitted.

You wave your hand over a camera. At this point I presume they collect such biometrics whether I like it or not; they have cameras everywhere.

Isn't it a deep vein scanner? Much harder to spoof than still images or even video.

Nope, just a normal camera + a lot of infrared light.

Even modern fingerprint capture can be done with just a phone camera (but that’s also a feature of Amazon One’s enrollment process - you use your own phone to take photos of your palms, then they’re verified on the entry tower and matched up.)

Re: Amazon One palm authentication discontinued

#174

Earlier quoted context omitted.

I used it at Whole Foods cause it did my prime code and charged me at the same time without digging my phone out of my pocket but also my Whole Foods has bad reception so it’s annoying to use

You don't need reception of any kind to do an NFC payment, as long as the terminal has network access (even through ethernet). the Prime code thing is a good point tho

I used Amazon One at my workplace all the time, but I only used it at the self-checkout line since I'd rarely get more than a few items, and the lines are shorter at this crowded neighborhood WF. There, I would scan all my items and use my palm to both log in to Prime and pay. Given that I would be scanning my own items, I much preferred it to phone or watch, as I didn't have to fish them out after scanning.

I am surprised nobody has mentioned the real joy of checkout at Whole Foods, which is that there is no annoying, incessant voice asking every self-checkout shopper, "Have you scanned your rewards card yet?" and "Please complete the transaction on the pin pad." It must be sheer torture working all day with those going off constantly.

Re: Amazon One palm authentication discontinued

#175
post #130

Earlier quoted context omitted.

I agree in theory, but yet I have an iPhone, and Apple is managing my biometrics. I do not have Clear, or TSA preCheck, etc. but still my biometrics are in the US database. So, in practice, I am not sure if that is truly a non-starter for "normies" and even some "techies". I already gave up on my face biometrics living in US.

Your biometrics are in the secure enclave of your specific phone. Apple doesn't have them in a database.

They do have ways to access to them, which is the same thing in my book.

https://www.bleepingcomputer.com/forums/t/809154/apple-silen...

Re: Amazon One palm authentication discontinued

#176
post #77

The tech here was good but the product implementation was terrible. These scanners just showed up randomly in places and just sat there unused. I literally both saw them all over and never actually saw anyone use it. No clear onboarding pathway, no explanation as to what it did or why use it, no clarity on what happens to the data. Just a box sitting there. It was as if all the focus was on the tech and nobody bother…

I used them in whole foods all the time

After they showed up a year or two ago, I never saw a single person use them in the checkout line. Bad vibes, giving my biometrics to Amazon, and I think that's how most people felt

Re: Amazon One palm authentication discontinued

#177
post #109
post #98

Earlier quoted context omitted.

Any card on your account should work, last 4 must match, I have never entered number or scan QR

Oh, then my watch should suffice. Okay, I shall try it next time with a Prime discounted product!

Gpay/Apple Pay added card etc will not match hand-entered card on Amazon site's number since last 4 differs IIRC

Re: Amazon One palm authentication discontinued

#178

Earlier quoted context omitted.

Your biometrics are in the secure enclave of your specific phone. Apple doesn't have them in a database.

They do have ways to access to them, which is the same thing in my book. https://www.bleepingcomputer.com/forums/t/809154/apple-silen...

I don't think this shows that at all?

Re: Amazon One palm authentication discontinued

#179

Earlier quoted context omitted.

Walk me through it. Why do you have all these steps to pay at a supermarket? When I am here in the UK, I wave my phone over the card reader, it goes "Pling!" and that's my stuff paid for. Of course, it's different elsewhere. When I am over in Austria, I wave my phone over the card reader, it goes "Pling!" and that's my stuff paid for, but this time in Euros , at the going exchange rate.

In the US, you also wave your phone over the card reader, it goes "Pling!" and that's your stuff paid for. The GP comment is not about paying (although it can do that too [1]), but rather about providing their Amazon account details for Amazon Prime discounts and other benefits. A similar process is the case in the UK as well at Amazon Fresh stores, last I checked. [1] https://www.amazon.com/gp/help/customer/display.…

There aren't any Amazon Fresh stores in the UK, are there?

Re: Amazon One palm authentication discontinued

#180

Earlier quoted context omitted.

They do have ways to access to them, which is the same thing in my book. https://www.bleepingcomputer.com/forums/t/809154/apple-silen...

I don't think this shows that at all?

How else can you patch an exploit if you don't try it first? The first step in reverse engineering malware is to try the exploit in a controlled environment.
Post reply on HN