MSE News: Keep forgetting your PIN? Fingerprint recognition cards on the way

ZTD

Mirno wrote: »

Two factor authentication is based on the idea that you're proven to be there, and proven to actively consent to the payment.

There are 3 factors which can be used in authentication:

1. Something you have.
2. Something you know.
3. Something you are.

Fortunately, most people realised from the beginning that you can be relieved of something you have without you noticing.

Something you know - as in a PIN, can be taken from you without you realising. Just see the rise of the ATM camera for that. However, in the early days of chip and PIN, banks refused to pay out money to people who had been defrauded citing that it was impossible to beat the system. Many years later, that has been demonstrated beyond reasonable doubt to be delusional. Banks now have to pay up unless they can *prove* you were complicit/negligent.

The final frontier is going to be that something you are (in this case fingerprints), can't be taken from you with you noticing. It will be a number of years and a number of people defrauded before this too will be proven to be delusional.

Mirno wrote: »

Having the card proves you're there,

Are you sure about that? Nobody steals a card?

Mirno wrote: »

It seems like they've missed the point with this idea.

The point is that the banks can blind with science and avoid paying out for fraud committed using bank cards and shift the costs onto the consumer involved. Even if it is only for a few years, that's pure profit.

InsideInsurance wrote: »

There are different technologies of how "finger print" reading can work from the norm of just looking at the print itself to actually reading the blood vessels under the skin.

Once you have a record of the blood vessels under the skin, it's easy to make a copy. A copy wouldn't fool a person, but machines are a dumber breed altogether.

InsideInsurance wrote: »

Without knowing exactly what is being used its hard to predict its security. With the Apple Pay it uses the existing TouchID technology which has already shown to be able to be bypassed with fake prints - though those that did bypass it did say in real life situations it would be fairly difficult to get a good enough clean print from the phone itself as its normally covered in them thus damaged.

If you ran a shop - let's say as a front for the Tamil Tigers - all you need is a glass surface. They will lift a finger print no problem at all, and can be cleaned at regular intervals.

Mandelbrot wrote: »

Why bother with the card?
Just implant a chip into everyone's finger.

Sounds rather painful - many people have one on their shoulder, can we not use that one instead?

callum9999

Paul_Herring wrote: »

I do hope you're joking there, but on the off-chance you're not:

No thank you. It's bad enough that the current government is proposing even more mass medicalistion of the general public, without corporations requiring/encouraging invasive procedures to implant RFID chips which can't be turned off, cloned easily, hijacked for governmental purposes etc.

What "mass medicalisation" do they currently do that makes you so disturbed?

Not that I want a chip in me either!

Paul_Herring

callum9999 wrote: »

What "mass medicalisation" do they currently do that makes you so disturbed?

In increasing order of disturbation, and ones that most people will have heard of: Fluoride. Folic Acid. Statins.

callum9999

Paul_Herring wrote: »

In increasing order of disturbation, and ones that most people will have heard of: Fluoride. Folic Acid. Statins.

I knew I'd regret asking!

Butterfly_Brain

Mandelbrot wrote: »

Why bother with the card?
Just implant a chip into everyone's finger.

The number of the beast, no thank you

dealer_wins

I still think a PIN number, and a card with your photo on (that has to be checked by store staff) would be a good step in combating fraud.

Biggles

Mandelbrot wrote: »

Why bother with the card?
Just implant a chip into everyone's finger.

Someone's way ahead of you...

http://www.connectedly.com/why-i-implanted-nfc-chip-hand

Pincher

Mandelbrot wrote: »

Why bother with the card?
Just implant a chip into everyone's finger.

Because when the !!!!! cuts it out, it hurts.


What about something like a nipple ring or belly button pin?
Less permanent but you can shower with it.


If pet passport chips are so "humane", I suppose we could, but with a twist: Cosmetic chip implants! When you have a breast implant. nose job, etc., you add the chip to it!

GDay

There is no security with finger prints. Some secure hospitals now collect and store them from visitors before allowing access to the hospital, and their data security is not convincing. Apart from the danger of this becoming common practice, prints are left everywhere and can be easily lifted.