Google Boosts High-Risk Account Security with Phone-Only Setup – Slashdot
It’s well worth joining this programme if you are at all concerned about people trying to take over your Google account. I was getting harassed years ago and signed up, and as well as protecting my accounts it also gives you a lot of information about the attacks being made. Some of it is quite revealing, like the timezones involved.
The best part about biometrics is placing an image of your face in front of the camera to unlock.
That with phone cloning, you have one single device that controls access to your life…. enjoy thieves!
Is Google doing it’s trick of adding things to Pixel phones only (and blocking Samsung/OnePlus/etc) again?
Dear Google: please stop. Make all Android phones equal. This makes me LESS likely to ever buy a Pixel.
Essentially biometric “authentication” isn’t particularly secure. There are 3 categories of problem:
1. It’s hard to keep biometrics secure. Everybody can get to your fingerprints or iris images. All systems so far could be duped into accepting forged biometric measurements. 2. You cannot derive keys from biometrics, which means that you can only use it to unlock a key that was already stored in plaintext. Even with special hardware such keys can in principle be retrieved with a modest budget. 3. It’s unclear
0. You cannot change biometrics when they are inevitably compromised.
Biometrics are not a secure means of authenticating anything. Or even identification, unless you can absolutely prove that the user’s sample came from them directly. (I.e. Not lifted from a cup in a garbage can, doorknob, sewer, etc.) FYI: A chip cannot do that at all, because it cannot reason. All it can do is process the sample it’s given. It cannot track down the source or question the male user why they are handing the system a sampl
Slashdot Top Deals
Heavier than air flying machines are impossible. — Lord Kelvin, President, Royal Society, c. 1895
It’s well worth joining this programme if you are at all concerned about people trying to take over your Google account. I was getting harassed years ago and signed up, and as well as protecting my accounts it also gives you a lot of information about the attacks being made. Some of it is quite revealing, like the timezones involved.
The best part about biometrics is placing an image of your face in front of the camera to unlock.
That with phone cloning, you have one single device that controls access to your life…. enjoy thieves!
Is Google doing it’s trick of adding things to Pixel phones only (and blocking Samsung/OnePlus/etc) again?
Dear Google: please stop. Make all Android phones equal. This makes me LESS likely to ever buy a Pixel.
Essentially biometric “authentication” isn’t particularly secure. There are 3 categories of problem:
1. It’s hard to keep biometrics secure. Everybody can get to your fingerprints or iris images. All systems so far could be duped into accepting forged biometric measurements.
2. You cannot derive keys from biometrics, which means that you can only use it to unlock a key that was already stored in plaintext. Even with special hardware such keys can in principle be retrieved with a modest budget.
3. It’s unclear
0. You cannot change biometrics when they are inevitably compromised.
Biometrics are not a secure means of authenticating anything. Or even identification, unless you can absolutely prove that the user’s sample came from them directly. (I.e. Not lifted from a cup in a garbage can, doorknob, sewer, etc.) FYI: A chip cannot do that at all, because it cannot reason. All it can do is process the sample it’s given. It cannot track down the source or question the male user why they are handing the system a sampl