Slashdot Mirror
Biometrics Win Support From the Lazy
judgecorp writes "We're used to discussions about privacy and security, but amongst users, the real issue is ease of use, according to a survey by Unisys. It's not a huge sample, but ten percent of the users in Asia were happy to be chipped and have done with it." From the article: "Frost & Sullivan security analyst James Turner said while speed of identity verification may be driving people's acceptance of biometrics, the key issue is that biometrics can be a security block, rather than an enabler. Turner added that what is more important in the smartcard debate is ratifying exactly where the identification data is stored. "
I wish there was someway for me to use a fingerprint scanner or embedded RFID - that way I could get first post! ;-)
There are shills on slashdot. Apparently, I'm one of them.
...is in the body area most likely to be guarded.
I don't want an RFID which simply spews out "yes this is Churla" to any device requesting my identity because that it far too easy to spoof. Anything transmitted is just a transmission and on the most basic level can be recorded and rebroadcast by someone else.
This brings around the point that you would still need a second means of authentication anyways. meaning either a password/code to enter that you knew, or possibly some biometrics like fingerprints/retina scans. I don't trust facial geometry scanning because it also is dupable easier than stealing a retina.
I'm a fiscal conservative, it's a pity we don't have a political party anymore
Mold the technology to the users, not the other way around. Check.
< grrr / >
(But carrying around a device for turning it off kind of circumvent the whole idea... Then i could just carry an ID card with an off switch instead)
Mind you... if all they need is a fingerprint and/or data from your RFID implant, a crook wouldn't even need you alive. The RFID chip would supposedly keep working for a while and fingerprints don't depend on you being alive. Retinas would be a different story, since they require a constant blood flow, though I'm not sure what the decay rate is for retinal tissue when you die.
Food for thought.
GetOuttaMySpace - The Anti-Social Network
"ten percent of the users in Asia were happy to be chipped and have done with it."
Is being "chipped" biometrics at all? Or am I being a semantics Nazi?
I am not left-handed, either!
...from my La-Z-Boy chair.
times and people will believe it.
Unisys has the most to gain by selling this story. They do these kinds of projects on a regular basis.
I'd be interested to hear how many of their smart card projects actually worked as promised.
http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
and what's to stop someone from putting someone else's or a duplicate chip in
Why not simply embed a password in a chip on some jewelry like a bracelet or a ring? Something you can take off if you need, and will be aware of if it is missing. Then have a system to deactivate it if it does come up missing or stolen. I for one don't want to have anything implanted in me unless it's a matter of life or death, but I guess the sheeple don't have as much of a problem with it :-(
Taking guns away from the 99% gives the 1% 100% of the power.
RFID isn't lazy. This would be the ultimate in lazy and simple. Of course, it would be fun if things start happening randomly once your mind starts to wander.
"Some days you just can't get rid of a bomb."
I don't think the users are sick of having to type -- they're sick of the situation created by lazy-ass admins who think that you create security by having 30 different accounts, each with >8 characters, with mandatory uppercase, lowercase, numerics and punctuation. Oh, and they all have to be rotated at 60 day intervals and it's easy because you just make up a little story about each of your convoluted passwords, remember all 30 of them and make up a new one and forget the old one every time you change the password!
I just had to change and lengthen my purchasing account password because, y'know, there's a huge problem with h4x0rs ordering office supplies in my name. I'll tell you where I'd like to implant an RFID chip...
What I'm listening to now on Pandora...
These lazy people should watch "Charlie Jade" first.
http://www.charliejade.com/
In the show, in the Alphaverse ( a parallel universe with more advanced technology than use) everybody has a chip in their wrist. They use is as a debit card. The corporations/governments use it as population control. If you don't have a chip, you don't exist and anybody can kill you.
BTW: Yes, it's a good show but the pace is slower than lets say BSG.
Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
I already don't like when they read my credit card and say, "thank you Mr. Fragmentate." Actually, I don't really want them talking to me in a personal manner at all.
You just know that eventually they'll always just know where you are. "Shame on you Mr. Fragmentate... an NC-7 movie? Tsk." I find it hilarious that a good portion of the people recently surveyed by my company about the "evils of browser cookies" were willing to have an implant in their body, but absolutely would not allow cookies.
I don't get it. A harmless text string implanted on your hard-drive that can track you quite anonymously (the net only knows what you tell it) and that you have direct access to; versus a device implanted in your body that you have absolutely no understanding of, or control over.
It's not THAT hard to whip out the driver's license or state-issued ID. I know they're not "secure" but this article isn't talking about security -- it's talking about convenience.
My ZooLoo
...that's because they are godless heathens! ;-)
"Klaatu, verada, necktie!" -Ash
Wasn't it Abe Lincoln that said: "Those that would be be lazy and get an RFID chip inserted into them deserve no privacy - who shot me?"
Get your own free personal location tracker
http://en.wikipedia.org/wiki/Biometrics
"automated methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits"
Store a 48-96 bit (6-12 byte) string of alphanumeric information inside of a person's brain. This will be easier than having to keep your implant safe/remember your rfid card/etc, as your brain is always with you. You can also claim that you are using "quantum encryption" to keep the key safe (provided that there are no accidental dumps to the standard i/o devices).
We then train the person, through Pavlovian techniques, to input their security code via their fingers. Biometric key storage and retrevial solved.
...where Jon Westhues cloned an implanted VeriChip (the only FDA approved chip on the market) in 10 minutes with a homebrew device, NO CHIP FOR ME!
"Win treats sysadmins better than users. Mac treats users better than sysadmins. Linux treats everyone like sysadmins."
no text
100% of those 10% surveyed are probably not accustomed to the normal daily freedoms we have as Americans. If you survey 10% of people in China who are used to being oppressed by their government I'm more than certain they'll be more accepting to this idea than 10% of Americans. I hate one-sided/slanted polls because not everyone can think for themselves & there are those who are prone to take a poll for gospel.
Wherever you go, there you are.
It seems like all these technologies can do for us is to say "there's a good chance this is me." In order to really ID someone, you can't just take an instant in time -- you'd have to have some way of checking their "story", i.e. how do you validate that their id isn't a fraud? We'd be way better off if we could reject any fake id vs. continuing trying to verify that an ID is in fact the actual person it says it is. If you could always tell a fake, then at the very least you'd have to steal the actual ID to use it, meaning if it was reported stolen fast enough, anyone trying to reuse it is just completely busted.
stuff |
"...is in the body area most likely to be guarded."
The ass?
I would have voted against biometrics, but never quite got around to it.
[% slash_sig_val.text %]
1984 style dystopian future sounds like a laugh...
The problem was stated in another article where people with laptops are stealing cars with keyless entries. Just think what they could do if they stole your chip info and could access not only your car but every aspect of your life.
remember Demolition Man 2?
"You're everywhere. You're omnivorous."
If you implement theoretically secure designs, but they suffer from usability problems, you'll end up with a system which is neither secure nor usable.
If, on the other hand, you design your security/authentication mechanisms with usability as a key concern, you'll end up with usable, secure systems.
Is Slashdot trying to warm us up to personal chipping? This is the second article today that suggests chipping people as acceptable!
.380 lead slugs. Bring it!
Here's my position on the matter and it WILL NOT CHANGE! I will chip ANYONE who chips me. Fair enough?
The chips I am issuing are
Is this something that we could and should perhaps be doing more cheaply , by sending thumbs offshore? If someone wants to access their data here, it would make more sense to have their thumb or iris in another country with a lower cost. I think in this global economy we're all shareholders whether we like it or not.
If companies here have lower costs, then dat way we can reinvest ur profits back in 2 the company 2 save you even more money.
U send me ur thumb 4 ur outsourced job plz.
Thx.
Well, based on my experience (aka 2 good Asian friends of mine), this might actually be true... Hmm....
Blessed are the really lazy, since they'll procrastinate about going down to the government center to take the Mark of the the Beast! - ACs 4:20
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
I've had my credit card info stolen when the swipe machine at a Kinko's was hacked to record everything. That very night I got a call from VISA regarding suspicious account activity; my card was deactivated and they sent me a new one in the mail.
;)
Imagine if I were using a retina or fingerprint scanner instead of a credit card. Replacing my retina/fingerprints isn't nearly as easy.
Biometrics mean you have once chance to keep your identity safe. Afterwards you're screwed for the rest of your life. For this reason I don't think biometrics is going to replace the authentication methods we already have: after a decade of using biometrics, half of us will have had our biometric information stolen and will be back to cards anyways. I'm going to beat the rush and stay with cards now
I *can* think of one potential good way to use biometrics: imagine if your drivers licence, etc, contained a jpeg file of your face that's been digitally signed by the issuing organization. That would make forgery much harder.
In summary, I think biometrics can work for applications where you don't care who sees your identifying info, but for any application where you would need to keep it secret, forget it. Not even good for the lazy.
Expected time to finish is 1 hour and 60 minutes.
I like to keep my body parts on my body thank you very much. They will just chop of my hand to get access now. It has already been done in a number of places.
I am athiest, so I am not really sure... but wouldn't Christians be upset by being chipped? Doesn't it make people nervous about the whole "Mark of the Beast" thing? I would think that the whole issue of implants would be a non-starter in the U.S., and probably many parts of Europe. But maybe Christians don't mind, if it is implanted in their butt, or their foot, or elbow, or somewhere other than their forehead or right hand. Or maybe Christians don't mind, because in modern U.S. politics the Christian-right supports a lot of things forbidden in Christianity (war and military service, death penalty, etc.)
Seems to me, using fingerprints, or retina scans, or some other "god given" form of ID would be more socially acceptable to Christians... and not really any more difficult to implement than an implate. And it would be harder to fake a retina or fingerprint than a chip.
Being a paranoid type, I tend to overreact to things, but consider the following-n .html#iss /2005/11/PostMortem/default.aspxp r fi.doc
Given the US Governments current plans to consolidate all the data they hold about you into ginormous centralized multi-agency databases-
http://www.whitehouse.gov/omb/egov/c-6-9-ioi.html
They then intend to secure this data with biometric-containing RFID equipped tokens-
http://www.whitehouse.gov/omb/egov/b-1-informatio
But they intend to use Microsoft MIIS as the security engine-
http://www.microsoft.com/technet/technetmag/issue
And to save cost they are going to let BANKS issue the RFIDs (the same places that routinely send pre-approved credit cards to your dog)
http://www.bankrate.com/brm/news/cc/20040420a1.as
http://www.thriftyfun.com/tf209806.tip.html
Put all this together and it becomes frighteningly plausible that the government has little interest in securing citizen data, and a lot of interest in assembling data it can use to control its citizens.
http://www.rense.com/general15/happy.htm
But nobody will complain, becuase totalitarian control of our lives will be, like having a chip implanted, *just so convenient*.
However, for those who are still conscientious, it is possible to comment on the government's plans. But please be restrained and responsible in doing so, ranting and raving will just discredit opposing viewpoints.
http://www.estrategy.gov/lineofbusiness/docs/ioi_
"Sic Semper Path of Least Resistance"
I guess my thought is, with rf tags it's always trasmitting, it's like yelling out your credit card every time you use it, anyone around can steal the data.
Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. ~Albert Einstein
Here come all the trolls saying how it's everyone else's fault for being stupid, and not that they really just don't give a damn so long as their life gets a little easier.
By summer it was all gone...now shesmovedon. --
I am constantly surprised by all of the security efforts and fads that come and go. I have observed that security is usually lighter where people know and trust each other and is more complex where people do not know each other. Perhaps security experts would do well to consider how we could improve the relationships we have with people around us.
I was pretty deeply into the smartcards and biometrics business 7-8 years ago and they had VERY cheap ($2/keyboard on a keyboard) and VERY easy to use embedded keyboard scanners (as well as separate). We built prototypes for folks to easily to computers and web accounts, but it didn't really take off.
Why? Users don't really care - even for bank account logins. Passwords work well enough. Also, everyone 'says' they'd LOVE biometrics, but when you get down to capturing their electronic fingerprint, they start to get nervous.
It's rather like smartcards. While they're superior to credit cards, the credit card system in the US is mature, ubiquitious, integrated, and simple enough that most consumers wouldn't really get a huge benefit. I don't think most identity theft comes from stolen passwords.
Same with biometrics - the technology has been around for 10 years and it's made some headway into niche applications, but it's not going to explode anytime soon unless WalMart or banks requires everyone to use it.
Requirements for defeating retinal scans: one fountain pen. This proves it conclusivly. Hollywood NEVER lies.
Did you know that you can be apathetic to apathy? Not that I give a shit...
Yeah, right... Where do we put the identification metrics and how is it kept in check from unauthorized usages?
You have your basic triage of information:
1. Consumer/User/
2. Merchant/Provider
3. Arbitrator/Mediator/Authenticator
Each MUST be able to revoke one of the other two for such a successful system. Right now, the biggest problem in today's computing world is the consumer/user cannot revoke.
Without user revokation, the system is ineffectual against abuse (i.e., identity thefts, innocent arrest records, stuck with a Social Security Number)
What is needed is a 3-way public key exchange algorithm (can't even find that in Google).
when they implanted the RFID next to my scapula, but everyone just said I had a chip on my shoulder.
Some see the vessel as half full; others see it as half-empty; We pour it out on the floor and laugh
no.
The problem is that no one should store any ID information. The chip needs to provide a digital signature, and the private key needs to exist only in the chip. This completely eliminates spoofing by "listening" to a device or pinging it for ID. I suppose each device should also have an ID, but that should not be used as authentication - just a suggestion as to which public key can verify the signature. OTOH, I'm guessing there are very good reasons to keep the ID and the signing device separate.
Biometrics Win Support From the Lazy
This is the same reason that beers with twist-off caps is so popular too.
Dedicated Cthulhu Cultist since 4523 BC.
Playing trivial pursuit a few years back, I got to ask a friend this question:
This late president's last words were "Oh dear, I think I have a headache".
Friend thinks for a second, then says "Hope it wasn't Kennedy..."
What?
Too soon?
Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
Theres a group to be proud of supporting your product. When they plan a protest they go all out
My father in law has a laptop with a thumbprint scanner. Can't access his files unless he slaps his thumb onto the scanner.
It sounds like a great idea until you consider the fact that he cooks a lot. I'm going to laugh the first time he cuts his thumb and can't access his oh-so-vital work files for a week.
Yep. I won't forget my password unless I suffer some pretty severe brain damage. He could lose access by accident.
I for one don't want to have anything implanted in me unless it's a matter of life or death
I'm getting cataract surgery next month - yes, a borg implant in my eyeball. I'll no longer need my contact lens, nor my reading glasses.
Should my hips wear out (not likely I'll live that long) I'll gladly get hip replacements.
A data chip, though? No way in hell.
Biometrics is "something you are" not "something you have." A chip, even embedded under the skin, qualifies as "something you have." It being embedded under the skin just makes it more difficult to lose.
What's controversial is RFID smartcards and implants containing personal data, not necessarily biometrics itself. Your driver's license and passport have had biometrics for a long time.
There are only two reasons for chip implants and biometrics: 1) tracking you 2) making money from tracking you.
End of story.
Do not just resist - REFUSE this bullshit.
Isn't it the purpose of all technology to aid in being lazy?
You can be disposed of yet still exist.
You'll still be officially alive
Don't be pissed.
You'll still be voting in 9595
All your base
are belong to us.
Decompose, at a slow pace.
Don't make a stinking fuss.
I'd go on a Vegan diet but the delivery time from Vega is too long. --brownkitty
The idea behind biometrics is that some autentication device detects some characteristic of your body that's not easy to forge. The response of a RFID chip however, would be relatively easy to fake, and the intruder would not have to be himself chipped.
Chipping is no more than a fancy way of carrying an access card, a poor substitute for biometrics (really NOT a substitute). And even if it were a perfect substitute, biometrics is not a good method under some circumstances (like remote logging: was that someone speaking his passphrase on a microphone, or just a recording?).
Decision makers should leave the mothod of authentication to the experts (sane ones, excessive paranoia is detrimental too).
GPG 0x1B479C78
I'll never willingly accept a chip implant that could be used by governments or companies to identify me. If my body and the product of my mind [speech, knowledge] aren't good enough, screw 'em. My ancestors didn't emigrate to America and work themselves into early graves so that their children could become property of the State. They came specifically to avoid such things, and the Constitution of this country promised protection against same. Their descendants have worked, fought, and voted to preserve that protection.
Now, a piece of jewelry I could remove, or clothing, would be OK. Nothing permanent like a tatoo or an implant, ever.