Slashdot Mirror
Microsoft Extends Its Windows Hello Login Security Features To Apps and the Web (techcrunch.com)
An anonymous reader quotes a report from TechCrunch regarding the beloved Windows Hello login security features: Microsoft is bringing to Windows apps (and even the web) some of the convenience and security of being able to use the same tech it uses to keep enterprise laptops safe. The idea here is to let you use the same technology that powers "Windows Hello" -- the login security feature of Windows 10 that supports fingerprint scanners, facial recognition and even iris scanners -- to log into other services, as well. This feature probably wouldn't be all that interesting if it only worked for Windows apps, but the company is also extending it to web apps. For now, this feature apparently only works with Microsoft's own Edge browser, but the company says it is compatible with the FIDO 2.0 standard and can theoretically work with any browser.
Hello Login sounds like a silly name for a cute little japanese cartoon character.
One of my many problems with Microsoft is the guilty-until-proven-innocent security model. Actually, they seem to have softened their position somewhat in recent years, but the perception remains, and whenever anything goes wrong with anything associated with Microsoft, one of the hardest possibilities to rule out is that I haven't done anything they perceive as a EULA violation.
Just a coincidence, but I ran into this last week. My employer recently announced we could upgrade to Office 2016. I wasn't brave enough to go first, but I was probably second in my section. Seemed to work okay for a couple of weeks, but then it died hard. Completely unusable. Lots of error codes leading to circular links on "support" webpages, but no discernible hint that the actual problem was a software conflict. I had to wildly guess that on the third day, but along the way there was at least one period where the software seemed to have lost its validation marbles. Some kind of ping pong between our corporate identity validation and Microsoft's? Not sure, but after I had solved the problem and thought everything was okay, I still received email with a new temporary account and password, apparently triggered during the period when the software thought it was invalid. (The attempt at recovery of the validation status must mean Microsoft now regards us as more of a major customer than a serious competitor? I think I'm sad.)
Anyway, mostly goes to prove my point that quality of the software is much less important than the cunning of the economic model. If Linux ever came up with a good one, Microsoft would be crushed. (Then again, maybe it's too late? Vista was SUCH a great opportunity...)
Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
Apple had a chance with Vista.
Too bad apples hardware choice was bad and lack of games.
I'm smelling a rat here. I check slashdot.org multiple times a day, and there are currently 1,2,3...**5** Microsoft product update "news" stories on the homepage. What gives?
You go Microsoft! Jump that shark!
... because fingerprints for passwords are also a good idea.
I for one welcome our new biometric overlords with outstretched hands and open eyes. Please, master, RECOGNISE ME!!1!
I thought it was okay to use biometrics for identification but not for authorization. Shouldn't there still be a requirement for a password?
You want me to let a Microsoft browser send my "fingerprint scanners, facial recognition and even iris scanner" credentials across the open Internet as a whizzo convenience feature? (Checks calendar, nope it's only March 31)... Sure! Why not? What could possibly go wrong?
Are we trusting MS now? Between the "EVERYONE MUST HAVE WINDOWS 10" bs and Brad Smith saying we should let politicians decide what the balance is ( between encryption and personal freedoms ), I'm having a hard time with the whole notion that MS needs MORE of my security information, not less.
Maybe I'm just paranoid though. My tinfoil hat is probably 3 sizes too small.
Mod me down with all of your hatred and your journey towards the dark side will be complete!
Microsoft gets 6 free articles on the main page. Is this what slashdot is reduced to, shilling for the MICROS~1 organization?
I'm still waiting for someone to sell me a webcam that will work with Hello. There are a tiny number of laptops and tablets with one built in, but despite the technology being announced more than two years ago, there isn't a single stand alone camera that supports it. Supposedly Razer will be offering one in Q2, but no firm date. It doesn't really matter what apps the feature will unlock if no-one has the hardware to ever use it.
You're just jealous 'cuz the voices talk to *me*
Microsoft + Windows + Security + Features - what can go wrong with that?
How can anyone talk about "Microsoft and security" makes no sense. Microsoft only exist because so many got sucked into this cesspool long time ago.
Windows 10 in corporate environment? Your CTO is obviously damaged beyond any hope for recovery.
Slashdot has become a propaganda outlet for Microsoft. We are getting two or three pieces of news on Microsoft every day, and I, for one, am getting fed up. If this carries on it will be bye-bye Slashdot.
Given Microsoft's history with being utterly incompetent at security, why would I trust them, or any other vendor, with biometric information? Why would I want a fucking app or a web page to have access to that stuff?
I'm sorry, but I neither believe this is any more secure, nor do I believe this isn't going to lead to huge unintended privacy violations or whatever damned server Microsoft keeps this shit on from either being hacked, or subpoenaed by big brother.
Sorry, but I'll pass on this shit. It serves no value for apps and web pages, and it's being offered by a company who I simply don't trust with the information or the implementation.
When this gets hacked, expect me to be quite loudly laughing and pointing.
Lost at C:>. Found at C.
If that doesn't scream "slashvertisedment" I don't know what does.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Security