Slashdot Mirror


Swallowing Your Password

HughPickens.com writes: Amir Mizroch reports at the WSJ that a PayPal executive who works with engineers and developers to find and test new technologies, says that embeddable, injectable, and ingestible devices are the next wave in identification for mobile payments and other sensitive online interactions. Jonathon Leblanc says that identification of people will shift from "antiquated" external body methods like fingerprints, toward internal body functions like heartbeat and vein recognition, where embedded and ingestible devices will allow "natural body identification." Ingestible devices could be powered by stomach acid, which will run their batteries and could detect glucose levels and other unique internal features can use a person's body as a way to identify them and beam that data out. Leblanc made his remarks during a presentation called Kill all Passwords that he's recently started giving at various tech conferences in the U.S. and Europe, arguing that technology has taken a huge leap forward to "true integration with the human body." But the idea has its skeptics. What could possibly go wrong with a little implanted device that reads your vein patterns or your heart's unique activity or blood glucose levels writes AJ Vicens? "Wouldn't an insurance company love to use that information to decide that you had one too many donuts—so it won't be covering that bypass surgery after all?"

21 of 118 comments (clear)

  1. Silly by Anrego · · Score: 5, Insightful

    The problem with this, and biometrics in general, is that there is only one you.

    You can't revoke your "vein pattern" any more than you can revoke your fingerprint. Using your same biometric information for everything has the same pitfalls as using the same password for everything, and you are just one sketchy gas station away from someone getting a copy.

    If you are going to implant something, why not implant a challenge/response system with a public/private key and strong cryptography, like you know, we've been doing on the internet with a good amount of success. A random very large number is just as good as any biometric information, and at least you can change it.

    1. Re:Silly by rubycodez · · Score: 4, Informative

      great till the algorithm is cracked and everyone on earth needs a new implant in the next hour

    2. Re:Silly by ghjm · · Score: 2

      But in that case, what's the advantage of implanting it? I mean, other than thieves now wanting to cut out my spleen instead of just taking my wallet.

    3. Re:Silly by msauve · · Score: 4, Insightful

      And what happens when you die, and the executor of your estate can't get access to your records and accounts? Sure, there's legal authority, but good luck making things happen smoothly or timely.

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
  2. Gives new meaning by swamp+boy · · Score: 5, Funny

    Gives new meaning to "I can't find my password in all this shit"

    1. Re:Gives new meaning by Anonymous Coward · · Score: 3, Funny

      This password scheme is hard to swallow, I think they should stick it up their asses.

  3. same problem as with any biometrics by roc97007 · · Score: 3, Insightful

    This has the same problem as any exclusively biometric technique -- the user can be compelled to give up their "password" merely by being physically present. "Something you have" can be taken, even if it's your still-living (for now) carcass. "Something you have" should always be supplemented with "something you know".

    The summary rightly brings up privacy concerns but I'd also be concerned about the security of the transmitted data. Like RFID, the information can easily be snooped, and would have to be appropriately encrypted to be useful as credentials.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  4. Re:unique? by viperidaenz · · Score: 2

    Or someone gets out a tape recorder and records your heartbeat.

  5. Biometric honesty by Tony+Isaac · · Score: 3, Interesting

    Biometrics are only good so long as the device that reads your pattern is "honest." If you have to inject a device to read your biometric patterns, you could just as easily inject a device that pretends to read your biometrics, but actually copies someone else's.

    1. Re:Biometric honesty by Em+Adespoton · · Score: 3, Insightful

      Biometrics are only good so long as the device that reads your pattern is "honest." If you have to inject a device to read your biometric patterns, you could just as easily inject a device that pretends to read your biometrics, but actually copies someone else's.

      Or vice versa: you could ingest a device that pretends to use your biometrics for security validation, but actually copies your biometrics and broadcasts for someone else to spoof or collect for various purposes not approved by you.

      "biometrics" are only metric at the point they're being read -- the resulting hashes etc. are by no means biometric, and are instead a static constant to be used/abused by whomever.

  6. Have we learned nothing by citylivin · · Score: 2

    from demolition man???

    https://youtu.be/CbM--4-z0cs?t...

    --
    As a potential lottery winner, I totally support tax cuts for the wealthy
  7. bypass operation must be covered under ACA by Forever+Wondering · · Score: 3, Insightful

    The heart bypass operation must be covered under the ACA (aka Obamacare). Insurance companies can no longer discriminate based on pre-existing conditions and can no longer impose a lifetime coverage cap.

    That is not to say that the implant idea is a good one for a number of other reasons.

    --
    Like a good neighbor, fsck is there ...
  8. Nope.. Hand or Forehead .. by labnet · · Score: 2

    I know you young kids don't read the bible anymore, so let me quote something from Revelation for you.

    "Also it causes all, both small and great, both rich and poor, both free and slave, to be marked on the right hand or the forehead, so that no one can buy or sell unless he has the mark, that is, the name of the beast or the number of its name. This calls for wisdom: let the one who has understanding calculate the number of the beast, for it is the number of a man, and his number is 666."

    --
    46137
    1. Re:Nope.. Hand or Forehead .. by Anonymous Coward · · Score: 2, Informative

      Some of us do, wiseass, and some of us, like me, know about a little thing called "gematria." In gematria, each letter of the alphabet (and this works for Hebrew AND Greek) has a certain numerical value. It JUST SO HAPPENS that 666 is, roughly, "Neron Qaisar," or Emperor Nero. Revelation is coded anti-Roman polemic.

      A better rendering of that is "Let him who hath wisdom reckon [that is, "count" or "sum"] the number of the Beast, for it is the number of a man, and his number is six-hundred-threescore-and-six." The verb is important here.

      You fundie fucks are useful idiots to the very people who would have us all chipped, tagged, and constantly monitored. You keep voting for these people. Indeed, the Church is fornicating with the kings of the Earth...

  9. When my daughter wants to get into my iPhone... by idji · · Score: 4, Interesting

    She just grabs it from the table and slowly creeps up behind me and pushes it gently onto my thumb, and then runs away with an unlocked phone when i notice it...
    The value of a password is that it is locked away in MY BRAIN until I choose to use it. These are not passwords, and neither is the button on an iPhone.

    1. Re:When my daughter wants to get into my iPhone... by RandomAdam · · Score: 2

      Be careful, what you have there is a ninja not a daughter.

      --
      @Random_Adam

      Sometimes a sig doesn't have to be funny!!
  10. Re:Probably not the approach I'd have taken by monkeyzoo · · Score: 5, Funny

    When I shit the thing out, do I have to eat it again?

  11. Re:Acid is not a power source. by Em+Adespoton · · Score: 2

    on the other hand, your stomach could be a good power source -- kinetic energy, electrolyte source, AND it keeps a steady temperature. I think your colon would be even better though :)

    YES! The colon produces methane which is a fuel and could be used in some kind of fuel cell, perhaps. It's a win-win: you'd fart less and not have to remember passwords!

    ...and any time you needed a password for something, you could go with your gut!

  12. Bigger issues by s.petry · · Score: 2, Insightful

    The biggest issue is that people taut these implanted devices as "safer" than any other alternative. Most of us here can see through the gag, but when they market to the masses will your great aunt have the same ability to know? Perhaps not.

    Most here know that "Strong" authentication requires at least 2 of 3 (something you know, something you are, something you have) and not just one of them. Security experts prefer the something you have over something you are, because we can control and monitor that thing. Something you are can usually be forged easier than a Yubi/RSA key, because high grade biometric scanners are extremely expensive.

    IMHO this is just the latest crazy attempt to get people implanted. Let's not kid each other, that is the goal.

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    1. Re:Bigger issues by Muad'Dave · · Score: 2

      ... people taut these implanted devices ...

      Taut means under tension. Tout means to attempt to sell.

      --
      Tiller's Rule: Never use a word in written form that you've only heard and never read. You will end up looking foolish.
  13. Re:Probably not the approach I'd have taken by davester666 · · Score: 2

    I believe the idea is that they are 'single-use' devices, so...you get to keep buying new ones for the rest of your life, otherwise you are locked out of everything.

    Now there's incentive...do you buy groceries and eat outside, or buy a new password and go hungry. Or dig through your shit and be disgusted.

    And they'll make sure it corrodes from acid in your digestive tract so you can't fully 'reuse' it...

    --
    Sleep your way to a whiter smile...date a dentist!