Slashdot Mirror
Your Brain Waves Could Soon Replace Passwords Entirely (fastcompany.com)
Wenyao Xu and Feng Lin, assistant professors of Computer Science and Engineering at University at Buffalo and The State University of New York, write: Our team has been working with collaborators at other institutions for years, and has invented a new type of biometric that is both uniquely tied to a single human being and can be reset if needed. When a person looks at a photograph or hears a piece of music, her brain responds in ways that researchers or medical professionals can measure with electrical sensors placed on her scalp. We have discovered that every person's brain responds differently to an external stimulus, so even if two people look at the same photograph, readings of their brain activity will be different. This process is automatic and unconscious, so a person can't control what brain response happens. And every time a person sees a photo of a particular celebrity, their brain reacts the same way -- though differently from everyone else's.
We realized that this presents an opportunity for a unique combination that can serve as what we call a "brain password." It's not just a physical attribute of their body, like a fingerprint or the pattern of blood vessels in their retina. Instead, it's a mix of the person's unique biological brain structure and their involuntary memory that determines how it responds to a particular stimulus.
We realized that this presents an opportunity for a unique combination that can serve as what we call a "brain password." It's not just a physical attribute of their body, like a fingerprint or the pattern of blood vessels in their retina. Instead, it's a mix of the person's unique biological brain structure and their involuntary memory that determines how it responds to a particular stimulus.
Comment removed based on user account deletion
The trace will be flat.
-- I ignore anonymous replies to my comments and postings.
the first time I see the presented picture my mind will think: "I don't know who that is" and the system will store these brain waves as my password. I will then proceed to search the internet to figure out who the celebrity is. The next time I go to log into my computer and see the picture my entire thought process will be different since I'll know more about them. Hopefully I wouldn't then be locked out. I can imagine major events in a person's life could alter the way they think.
Their brainwaves never crest, just small swells of bigotry and fear controlled by over-active amygdalas...
head injury, alzheimer's, mental disorder brain chemistry meds, migranes, ...
or ahlzheimmer's or .... While an interesting idea for a biometric scan, there are a lot of things that can screw it up....
Biometrics replace usernames, not passwords.
User names identify who you are. You are always the same person; that can never be changed.
Passwords validate your credentials. Passwords may be changed when they are discovered by a third party; usernames (or brain waves, as discussed in the summary) cannot be changed.
I don't even want to know what goes on in someone's brain who can read about this research and can conclude that it will replace passwords anytime soon. For one thing the mind changes over time so we don't even have reason to believe that this unique response will remain static over time. Then there is the issue of industry adoption, not to mention the minor detail of needing to strap electrodes to your head connected to what is no doubt bulky and expensive hardware.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
My main disagreement with this article is over the word "soon".
"That's the way to do it" - Punch
Will it work hungover?
Drunks everywhere need to know.
I suppose it could be a fail-safe to not work drunk or hungover.
Soon? I figure this is years, if not longer, before brain waves replace passwords entirely. It's another case of things looking best before they have to be widely used. Unfounded optimism abounds.
Bullllshiiiiiiiiiiiiiiiiit.
So your system unlocks when you walk up to it.
Look at the NPC. It's almost like they don't have any other response to a story, except ORANGE MAN BAD.
Look at the Alt-Rightie. It's almost like he's trying to completely dehumanize another poster ("NPC?" Really? That's the best you can do?) for having the audacity of making a humorous quip that reflects badly on his Orange God.
We've had key fobs for decades. Databases have been able to hold more than 8 characters for a password for decades. Any system that hashes the user's password doesn't actually care how long the password is since it's hashed down to a fixed length anyway.
The problem is not making use of key fobs to allow per account passwords to be stored so you don't have to share passwords between accounts and those passwords should be a long string of random characters that never need to be typed in.
With key fobs, the account provider could issue the password when you register instead of having the user pick one. Put in your email address, give access to the fob, the provider can write a single password to their account file on your fob, done.
Work Safe Porn
Check out the Republican Nazi losing his shit over a free speech joke about the government! What a traitor. Mashiki you should be run out of this country by white people soon, enjoy your advocacy nazi faggot apologist!
I guess the something you have is your brain, the something you know is which selected piece of music, or a picture of your favorite porn star you chose to use.
Seems pretty complicated and hard to save the info in your selected browsers password store,,,
Check out the Republican Nazi losing his shit over a free speech joke about the government! What a traitor. Mashiki you should be run out of this country by white people soon, enjoy your advocacy nazi faggot apologist!
I know not a lot of people have thought about this, but it's important. Passwords are one form of access rights. Keys are another. Heck, a secret handshake would be usable, if not entirely secure. The good ones though, they all have fundamental similarities:
* They can be changed ... you need to be able to change it
Someone lets the password slip? Loses a key? The enemy gets the launch codes?
* They are reliable
Ever get a drivers license that's valid 60% of the time?
* They can be transferred/communicated
Leaving a job and your replacement needs access? Sold your car and the new owner would like to drive it?
* The correct form of access isn't easily accessible
You don't tape the access code to the security door. You do use a key fob with a rotating access code. Etcetera, Etcetera.
There's others, like auditing and such, but the thing is, biometrics fail on every one of these to some extent. Ever try to give someone else your fingerprints, or change them? Did you know that your fingerprints will subtly change over time - or quite quickly in some cases; ever burn your fingers on an iron? They're not changable (in a deliberate sense), reliable, communicable, and their very nature makes them relatively publicly accessible.
They're not a replacement for passwords, and never will be, regardless of the level and sophistication of tech we arrive at. They're a way to provide convenience at the cost of security, like your amazon echo.
So a dag guy can "force" you easily to use your password!
Although I agree with others that their tests were "shallow", let us say, that's not what will kill it.
FTA:
"Soon" we'll be seeing soft hats or helmets hanging on the ATM to verify us. Oh, we have to buy our own? Right. Not gonna happen either way.
Biometrics cannot replace any secrets. They can, at best, be used to authenticate local presence in closed systems.
"Authentication" via remote biometric measurement carries absolutely no guarantee that actual bio was involved and thus does not have any valid security properties.
Such remote usage is *bad* both ways: An attacker can replay biometrics and a non-attacker cannot recover from biometric information copying,... ever!
Think about that every time you show your fingerprint to random scanners. You are effectively giving away your (lifetime) biometric to the scanner so it can simulate it to the authentication software. It could choose to store and forward to others and pretend that your finger is there at will. You are effectively trusting *every* scanner not to do this.
SLOGEN [ http://ungdomshus.nu : Sebastian cover music]
The computer is your friend.
Biometrics: Uses and Abuses
Written by Bruce Schneier and published in August 1999; and now more relevant ever.
Signatures, passwords, digital certificates, rsa id pair, signet rings, seals etc are forms of authentication and approval. Do not confuse between the two.
But.... Social security number, a form of identification is regularly misused and abused as authentication.
Whats worse is a wide array of semi public info, information easily known to close family members like mother's maiden name or where someone went to school masquerades as authentication for password reset process.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
The question is, will your login fail when you're high or drunk?
I seriously doubt that one's brains reacts the same way to a photo every time you look at it. On the extreme, the way my brains reacts to photos of Bill Cosby today would most likely be different that 15 years ago. On the less extreme, I also suspect the way a brain reacts to something probably varies to some degree depending on what mood they are in. A picture of an attractive person of the opposite sex is probably going induce a much different reactions for someone who just got laid vs someone who just got dumped.
See subject & Dr. Angelo (Pierce Brosnan) "ALTeRiNg BrAiNwAvE PaRaMeTeRs..." (begin brainstem injection) FROM https://www.youtube.com/watch?...
* Had to do it...
("MIND OVER MATTER, Dr. Angelo - not a miracle - a FACT! It's NOT new - I realize nothing that we'rve been doing is new: We haven't been tapping into new areas of the brain. We've just been awakening the MOST ANCIENT. This technology is simply a route to powers that conjurers & alchemists knew CENTURIES ago. Human ract lost that knowledge & now I'm reclaiming it thru virtual reality. You realize Dr. Angelo that my intelligence has surpassed yours. & I can't allow your fear of what you don't understand to get in the way of this work..." - JOB/Jeff Fahey)
APK
P.S.=> I just watched it again last night is why... apk
But remember, you must think in Russian.
Or with a migraine.
paid for By the FBI.
All right jay we just going show up a lot of pic's till your phone unlocks. and I just checked showing pics does not need to have your attorney with you.
Multiple factor authentication includes SOMETHING YOU HAVE (fob, fingerprint, retina, brainwaves, token) and SOMETHING YOU KNOW (PIN, password, passphrase, your mother's maiden name, etc.)
The key to good authentication is to require all factors to be presented in order to authenticate. A brainwave is definitely something you have, and like a fingerprint, it's something someone else can sample to force you to authenticate against your will. Even if it becomes so sophisticated as to be able to "read your mind" thinking a specific word ("pink elephant") all it would take is the black-hat actor asking you to think about "pink elephant" and your mind would do so, thereby authenticating.
Passwords, PINs, passphrases, challenges, etc. require us to ACTIVELY CHOOSE to authenticate. Law enforcement hates this. So do black-hat actors. Those of us who favor authentication love it.
Brain waves will NEVER REPLACE PASSWORDS ENTIRELY soon or at any other time.
Ehud
Most of my coworkers would be unable to login...
So, anyone who shows me the photo gets my password? Sounds like every phisher's dream.
Last I checked, access credentials need to be deniable -- no, you can't have my password/key/handshake. It's a secret.
Mnemonic, that is.
If you set my password to be a picture of my dear Aunt Bertha, it will generate happy thoughts.
Whoops - Aunt Bertha died last week. Now we get a different set of thoughts.
Set it to something like a favorite actor, say Bruce Willis. Happy thoughts.
Whoops - I just watched "The Whole Ten Yards" last night. Bruce has now left the category of favorite actor.
Especially to "your kind" the UNIDENTIFIABLE anonymous STALKERS of me: "You realize Dr. Angelo that my intelligence has surpassed yours & I can't allow your fear of what you don't understand to get in the way of this work" -> https://search.slashdot.org/co...
* :)
(Now get the F out of MY way, fool... lol!)
APK
P.S.=> You're the one 'trained on 4chan discussions' - you didn't even offer anything of value to MY post OR this discussion... apk
And blood-black nothingness began to spin
A system of cells interlinked within
Cells interlinked within cells interlinked
Within one stem.
And dreadfully distinct
Against the dark, a tall white fountain played.
Cells.
Cells.
Have you ever been in an institution Cells.
Cells.
Do they keep you in a cell? Cells.
When you are not performing your duties do they keep you in a little box? Cells.
Cells.
Interlinked.
Interlinked.
1. Identify key biometric data you want to harvest/monetize.
2. Make that part of the authentication mechanism of some product.
3. ???
4. Profit!
Fingerprints, iris of the eye, and now brainwaves. Maybe the next phone will have a tiny pin you can prick your finger with to get a blood sample.
my voice is *NOT* my passport?
So you will have to spill your brain waves to border agents or declared terrorist.
A password is NOT an identifier, it is an act of submitting something, voluntarily, with free will. A cut off index finger is NOT a password, nor is ANY biometric data.
Biometric data can be replicated, whereas recalled memory you voluntarily submit is different, it is the sum of free will and identity.
This transforms "what you know" into a shade of "who you are". Stay with passcodes and passwords. The legal system would love for us to all move to biometrics, so we can't "forget" and deny them access.
How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
https://www.youtube.com/watch?...
Stop lying /. America is more likely to experience food riots than brain logins by a factor of atleast 10.
This site is so much garbage.
I thought the three things you could choose from for multi-factor were:
Something you have.
Something you know.
Something you are.
I think this would qualify as that third one.
Everyone KNOWS you're just an UNIDENTIFIABLE anonymous STALKER of myself & an off-topic "ne'er-do-well" do-NOTHING zero.
APK
P.S.=> It's all you'll EVER be... apk
Woody Allen, "Sleeper" https://www.youtube.com/watch?...
No, thank you. If someone start treating me with a rubber hose, I rather give him my passwords and leave than being kept around because my head is my password.