I'm not a big fan of biometrics, which is a solution proposed in the article, though I've only read it in part. (I stopped when opposition to biometrics and blockchain was called ideological.) The reason being that biometrics can't be revoked, as in, once a bad guy has a copy of your fingerprint or whatever, he can forever compromise any system where you authenticate yourself with your fingerprint. Secondly, biometrics aren't hashable. Biometric values change slightly due to environmental factors, and due to imprecise measurements. This makes it impossible to ever get the exact same measurement again. This in turn means that anybody who runs authentication needs to store whatever biometric is used to authenticate you. Therefore, if they have a data breach, your metrics are forever compromised.
this post was submitted on 28 May 2025
5 points (85.7% liked)
Hacker News
1419 readers
414 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 8 months ago
MODERATORS