9 ms·
Intel Security True Key
- shock 10y agoCan the mods or OP change the url to the english version? https://www.truekey.com/ https://www.truekey.com/
- blakesterz 10y agoIt seems to do a redirect from .com to .com/de for some reason.
- daenney 10y agoDoes that too for me. Probably GeoIP gone horribly wrong. Click on "sprache" at the bottom and select English, or just change the URL to /en in the location bar.
- nobodyshere 10y agoThe owner of this website (www.truekey.com) has banned the country or region your IP address is in (BY) from accessing this website. Awesome.
- voltagex_ 10y agoStrangely - Tor may work. I connected via a Brazillian VPN (from Australia) and got a Cloudflare challenge.
- nobodyshere 10y agoI don't see why I'd want to use a service that bans my country from even accessing their website.
- nobodyshere 10y agoI don't see why I'd want to use a service that bans my country from even accessing their website.
- newscracker 10y agoI was just going to say the same. The intel.com page does not have pricing information and just states that it's free for up to 15 passwords, whereas the True Key site [1] provides pricing information ($19.99 a year for unlimited passwords) and also has links to the mobile apps. [1]: https://www.truekey.com/ https://www.truekey.com/
- deleted 10y ago[deleted]
- shshhdhs 10y agoHere is the English landing page on Intel's direct site: http://www.intel.com/content/www/us/en/architecture-and-technology/true-key/intel-true-key-technology.html http://www.intel.com/content/www/us/en/architecture-and-tech...
- sctb 10y agoThanks, we've updated the link from https://www.truekey.com/de https://www.truekey.com/de.
- daenney 10y agoI'm rather concerned about the face recognition part and how easily that might be fooled. Has anyone tried that? It's an interesting take on a password manager though, I do like the second factor through an additional device before it grants access.
- lyle_nel 10y agoAlthough not this particular face recognition. I managed to fool face recognition passwords in the past with a simple photograph of the person. As you would expect it works perfectly fine.
- zeta0134 10y agoThis is part of the reason Windows Hello won't use standard webcams for facial recognition. They require a depth camera (very unusual feature on laptops, usually marketed as Intel Real Sense) so that a simple photograph isn't enough to fool the camera. This is still far from perfect though; a truly determined bad actor could create a passable 3D model, or even a face mask, and probably still fool the sensor. It just takes more work. The whole point of passwords is that no one can know them but the person intending to use them. Using a publicly visible part of my body is just asking for trouble.
- robinhoodexe 10y ago>AES-256, one of the strongest encryption algorithms available Hmm... I'd take 4096-bit GPG over this any day. I rather like using pass[0] [0]https://www.passwordstore.org/ https://www.passwordstore.org/
- moppl 10y agoTrue Key makes use of the Intel Management Engine (IME). It gives a hint at what Intel is up to with the IME. One of the intended uses is "identity protection", storing secrets like e.g. biometric data in the realm of the IME, and to ultimately get rid of passwords. Considering the security concerns regarding the IME, I doubt that it is a good idea to hand your passwords over to Intel (ME). At least I don't want to support this technology by using apps that utilize the IME. To read up on the IME there is a free book by one of the developers on it... http://link.springer.com/book/10.1007%2F978-1-4302-6572-6 http://link.springer.com/book/10.1007%2F978-1-4302-6572-6 Inside is an entire chapter on Intel's identity protection.
- seanp2k2 10y agoInteresting that Apple is doing similar things with the embedded ARM stuff in the new touchbar MBPs.
- wyager 10y agoThe thing is that Apple actually has a pretty good track record for security and not violating the privacy or integrity of customers' products. I have a lot more trust in Apple doing this correctly. I'd be fine with Intel taking on secure computing, but there's been some pretty bad stuff with the IME (like sending data to the internet outside of user control when using intel NICs), so I'm skeptical of this approach (especially when they're talking about facial recognition as a security measure).
- paulddraper 10y agoiTunes
- wolfgke 10y ago> but there's been some pretty bad stuff with the IME (like sending data to the internet outside of user control when using intel NICs) That's also a typical concern about baseband processors - and Apple has a baseband processor integrated into their iPhones and iPads. OK, there is a difference: While for ethernet ports (and with a little bit more effor WiFi connections) you can at least theoretically analyze whether there is dubious traffic, this is nearly impossible for connections over mobile networks.
- fdik 10y agoThey never seem to understand: Your fingerprint like your face can be the username, but never the password. Your fingerprint is exactly like your username: you cannot change it and you always leave it in public.
- IshKebab 10y agoYou can use fingerprints as a password. They aren't perfect but in many situations they are fine. Security isn't black and white.
- akira2501 10y ago> You can use fingerprints as a password. Provided you have them, medical amputations of limbs is a thing that happens.
- evanb 10y agoSomething along these lines was recently in the news: http://usa.chinadaily.com.cn/china/2016-11/22/content_27455778.htm http://usa.chinadaily.com.cn/china/2016-11/22/content_274557...
- quickben 10y agoSince you can't change them, long term security is nonexistant.
- junto 10y agoProviding you have them, I can chop then off and use them. Seriously, use your eye or fingerprint as a password and there is someone ruthless enough to remove them from your body.
- arjie 10y agoWho is this mythical fellow who's not going to give up his password in such a situation anyway? No one's going to protect their accounts at the cost of their finger. Certainly not me. I mean, I agree with not using fingerprints as passwords but not because I want to protect myself from the fingermen.
- Seylerius 10y agoThis is an adorably bad idea: + As fdik said above, you can't change your fingerprint or face easily, and it's always public + Face recognition and fingerprint scanning are not robust against spoofing — there are known ways to circumvent both + You can be compelled to authenticate a biometric without a warrant Don't use biometrics as a password; use them as a username.
- BinaryIdiot 10y ago> Don't use biometrics as a password; use them as a username Even then people's faces change and through accidents fingerprints can also be changed / removed and then you're shit out of luck. I'm terrified I would store my important shit in something like that then get into a car accident or something and be no longer able to open it.
- Seylerius 10y agoYet another reason why this is a horrible idea.
- wolrah 10y agoImplement it like the Xbox Kinect auto-signin where you still have a username but the camera lets the device figure it out on its own. That way people can still manually enter their username in the event of any disfiguring injury or technical glitches but don't have to normally.
- BinaryIdiot 10y agoRight but the post I was responding to said to use biometrics as the username hence my comment. You're suggesting using it as a type of password :)
- wolrah 10y agoNo I'm not, I'm suggesting it be used to identify the user, then they can enter their password the same as always.
- atemerev 10y agoNice try, NSA.
- dfarts 10y agoFingerprint technology is hackable, easily so. Edit: Face recognition is even easier. Iris scanners are the only sure way to recognize someone.
- redial 10y ago> Iris scanners are the only sure way to recognize someone For now.
- noja 10y agoThis relies on all iris scanners everywhere not being hotwired to feed them a saved iris scan.
- Freak_NL 10y ago> Iris scanners […] Iris scanners for authentication kind of lost their appeal to me after watching Demolition Man.
- iou 10y agoMy skeptic-sense is tingling!
- HashThis 10y agoThe truth is that we can't trust INTEL. Their CPU micro-code or ME (Management engine) can and does "phone home" to the internet, grab updates and update the CPU. They don't allow the customer to turn this OFF, which betray's the customer who purchased the CPU. Anyone who can sign the update and intercept the download channel can update your CPU with you having no ability to protect yourself. We can't trust intel. Intel needs to allow 3rd parties to build a small piece of hardware for private key storage, generation, signing and encryption, with self-distruction upon tampering. Then customers need to be able to go to the store, pick which vendor they want, and they plug it into their motherboard. By selling them in the store when the customer can make a surprise purchase, then that prevents tampering upon shipping withe ecommerce deliverables.
- akerl_ 10y agoWhat are some good resources to learn more about the phone-home functionality in their microcode? I've been trying to find more details and have been unable to do so.
- temptel 10y agoYou've been unable to find that information because no such "functionality" exists. Microcode just patches bugs or configuration details of the CPU; it doesn't "phone home".
- akerl_ 10y agoThat was my initial understanding, but I figured I'd give the parent commenter the benefit of the doubt in case my understanding was flawed. Some more searching seems to lead back to where I started: the microcode itself isn't phoning home, the only phoning "home" that occurs is the normal process of "when you pull down an update for something, it requires phoning to the repository holding the updates".
- micheljones 10y agoME does have ability to do that, tho.
- msimpson 10y agoFirst, it's important to realize that biometric identifiers are not constitutionally protected in the United States under the fifth amendment given current legal precedents: "A Virginia Circuit Court judge ruled Tuesday that police officers cannot force criminal suspects to divulge cellphone passwords, but they can force them to unlock the phone with a fingerprint scanner." Source: http://blogs.wsj.com/digits/2014/10/31/judge-rules-suspect-can-be-required-to-unlock-phone-with-fingerprint/ http://blogs.wsj.com/digits/2014/10/31/judge-rules-suspect-c... Second, as others have already noted, you cannot hide or change most biometric identifiers and some people may not even have them at all. Therefore, passwords will always be the safest, most accessible option. However, more education regarding their creation, use, and support needs to occur: Password Strength: https://xkcd.com/936/ https://xkcd.com/936/ Password Reuse: https://xkcd.com/792/ https://xkcd.com/792/ NIST’s new password rules – what you need to know: https://nakedsecurity.sophos.com/2016/08/18/nists-new-password-rules-what-you-need-to-know/ https://nakedsecurity.sophos.com/2016/08/18/nists-new-passwo... Personally, I like to choose a small token representing the site or service at hand, then surround it with multiple pass phrases I've memorized over the years. This creates a strong password which is both unique and easy to remember. Not to mention when a site I use is inevitably hacked and my hash is stolen, I only need to update a single instance of this pattern--not reevaluate my entire system.
- hogrammer 10y agoI'm not sure of the wisdom of doing this without realsense cameras.
- quink 10y ago> Intel Security Hmmm... Let's Google that. > Intel Security Group (previously McAfee, Inc. /ˈmækəfiː/[3]) And I'm out of here.
- lultimouomo 10y agoAnd in honor of the sacred McAfee traditions, Intel Security True Key is bundled by default within the Flash installer; once you've downladed the default installer, you can't even opt out of it. You need to pay attention and unchecked the bundleware before downloading it. Sneaky!
- revanx_ 10y agoAlso worth saying is that if True Key is installed via Flash Mcafee bundle you can't actually uninstall it, you have to manually remove the service and delete the files/reg keys.
- ForFreedom 10y agoAfter reading all the comments there is not one person who is in support for the biometrics as a secure method but I see people being okay with biometric on iPhones by saying apples security better.
- woliveirajr 10y agoFingerprints can be faked in very ingenious ways. For example, [1] gives "Hacker fakes German minister's fingerprints using photos of her hands". Photos. Not even required to recover the fingerprint from the surface of something. Tell me how secure is that. [1] https://www.theguardian.com/technology/2014/dec/30/hacker-fakes-german-ministers-fingerprints-using-photos-of-her-hands https://www.theguardian.com/technology/2014/dec/30/hacker-fa...