Apple Patents Power Adapter That Recovers Lost Passwords
Sparrowvsrevolution writes "Apple has patented a power charger that also serves as a password recovery backup. If a user forgets his Macbook's password, for instance, he simply plugs in the cord, and it would provide a unique ID number stored in a memory chip in the adapter that acts as a decryption key, unscrambling an encrypted copy of the password stored on the machine. The technique, according to the patent, incentivizes better password use by avoiding traditional password recovery techniques that annoy users and lead to disabled or easily-guessed passwords. The new technique is only secure, the patent admits, in cases where the user leaves a mobile device's charger at home. So the idea may make the most sense for long-battery-life devices like iPods, iPads and iPhones rather than laptops, at least until laptop batteries last long enough that users don't take their power adapters with them and expose them to theft."
Well that's a reasonably stupid idea. Store the password with something many users are going to carry around with their laptop...
And even if you didn't.. you forget your password on the road, then what? And this is less annoying than having to answer a previously entered question?
Kills the 3rd party accessory market. Because you won't be able to get "crypto" power blocks from anyone else. Wanna bet?
I hadn't known there were so many idiots in the world until I started using the Internet -Stanislaw Lem
Than a normal USB security token? It seems like a power adapter is likely to be taken with the user. A smaller token could be carried on the person of the user. Or you can just write your password on a post-it in your wallet.
The Daddy casts sleep on the Baby. The Baby resists!
Password use *one way* hashing systems for a reason.
Thank you Apple, for once again eliminating desktop security.
Given the number of people I see charging up their smartphones in the office, I'd say the Apple patent people haven't quite grasped that smartphone battery life is a long way from what many people would like.
(Also, given that most non-computer devices like iPhones charge over USB, this seems distinctly less impressive. 'Put some data on some flash memory inside the battery charger' and transmit it over the USB connection hardly requires the kind of ingenuity that sending passwords up a DC power cable to a laptop does.)
Security is only as strong as it's weakest password recovery method.
This whole idea completely forgets that the whole purpose of your password might be to stop you little-brother/offspring/tech-illiterate-housemate (ie: anyone who lives with you) from screwing up your device.
From TFA: "So the idea may make the most sense for long-battery-life devices like...iPhones"
In what universe is an iPhone a "long-battery-life" device?
Seriously?
Boot while holding down Apple-S
I tried this, but it is asking for my FileVault password. Now what?
The more junk they cram in the power adapters, the harder it is for 3-rd party companies to make copies without Apple's consent.
If it's trivial and non novel then why is no one doing it or previously put a patent on it?
Well apart from the fact that this particular idea is stupid (thus, nobody doing it), sometimes things just luckily don't get patented, like "fuel cells on a computer" and "fuel cells on a cell phone" which were both shockingly not patented up until this year. Somehow even among swarms of lawyers, a few conceivable ideas go unpatented sometimes. Shocking, I know.
This idea is both trivial (passing data to a power adapter which attaches to a port that can also pass data? Wow not like half the USB-charged devices on the planet do that!) and non-novel (acts as a security key like the metric shit-tons of USB fobs that have been on the market over the last decade).
"When information is power, privacy is freedom" - Jah-Wren Ryel
Right, so again - why has no one done it before?
It's actually quite a good idea. If you forget your password you're not screwed, since you can unlock your device when you get home.
You'll notice they didn't patent the "metric shit-tons of USB fobs", but a different way to authenticate a device.
Whether it's different enough from a separate USB dongle that can unlock the computer is something the patent office should deal with.