3 ms·
What I learned from this thread: even engineers use insecure vaults with repeatable, deterministic, and exploitable passwords. Are there any non deterministic
by searchableguy 7y ago
What I learned from this thread: even engineers use insecure vaults with repeatable, deterministic, and exploitable passwords.
Are there any non deterministic unique passwordless way to login without depending on any entity?
Can you use your blood or state of the body to login?
Each time you login, there will be some differences but not enough that you could not match similarity. It will adapt every time you login and forget about past states.
Over a long duration without logging in, your blood or state could be much different so there is no chance of forever having lost your login if something is compromised.
- 411111111111111 7y agoBiometric information are usernames, not passwords. They're just hard enough to fake that a password can become unnecessary for casual security.
- ThePhysicist 7y agoThere’s the concept of unclonable physical functions (PUFs) (https://en.m.wikipedia.org/wiki/Physical_unclonable_function https://en.m.wikipedia.org/wiki/Physical_unclonable_function) that can provide something like this. Some companies like Physec offer key derivation mechanisms based on PUFs that depend on the physical characteristics of the environment of the device that generates the key (e.g. the electromagnetic impedance), so an attacker needs the actual device to produce a key that matches the profile, and tampering with the device by e.g. opening it destroys its ability to generate a key due to changes in impedance. It’s a really neat concept but I don’t think anyone found a way to apply it to a human, though it should be possible (e.g. using your heartbeat).
- nikola1010 7y agoA company called nymi does exactly this. They have a wrist-watch device that actively profiles wearer's heartbeat for unique identification.