3 ms·

Maybe a less dramatic situation than your hand being removed, what if a bad guy figures out the ability to copy your palm print.

JumpCrisscross 6y ago
> what if a bad guy figures out the ability to copy your palm print Then you would dispute the charge and have your own geolocation data or the store's video footage to substantiate your claim. This is a grocery store, not a diamond merchant.
- frumper 6y ago
  The problem isn't this one transaction. Of course you could dispute it, but you're in for a life of disputing charges as you can't tell the merchant to not accept your hand print and use a newly issued one like a card number when it is compromised
  - NovemberWhiskey 6y ago
    The article says that you have to register the palm print vs a credit card. A common-sense approach would suggest that if you cancel the credit card, then registration also lapses. If you happen to have attracted the attention of this master counterfeiter who has duplicated your palm you would simply have the option of not registering your new card with the system. If this happens on a large scale, yes, the whole project is doomed.
    - pavel_lishin 6y ago
      What happens when you register with the next credit card? It's not like your palm print will change.
      - NovemberWhiskey 6y ago
        Don't do that then. If you find that someone has (somehow) managed to duplicate your palm print then you probably do not want to enroll with that option for payments in the future.
        pavel_lishin 6y ago
        That's great advice for me - a person who's not going to register his palm anyway - but what would be your advice to Amazon for how to deal with this? Or what would be your advice to someone who wants to use their palm with a different credit card once their palmprint has been lifted and used to commit fraud?
    - frumper 6y ago
      Again, it's not that this specific issue can't be dealt with by canceling your palm print or convenient checkout. You're just left with not being able to safely register your palm print with any company if your biometric data gets stolen. I can envision a world where it doesn't take a master counterfeiter to 3d printer a palm print that gets through the scanner and a database of stolen palm print data people can buy and trade like they currently do with stolen credit card numbers. The issue is once your biometric data is compromised you have no recourse to regenerate it. Your solution is you just don't get to participate in these features anymore.
      - NovemberWhiskey 6y ago
        Yes, that's right. But what's the problem? You're back in the same place you are already. If this putative palm print duplication technology becomes widely available then people will stop building technology that depends on palm prints. As has been repeatedly pointed out, the risk lies with the merchants and the issuing banks (at least in the U.S.) for credit card payments. EDIT: and, at least in the U.S. again, no-one is going to be able to force you to use this technology; there will always have to be an alternative mechanism because there are people with no hands, and a system that required them would be a massive ADA liability.
text70 6y ago
Or create a palm reading fortune app that sells for 1.99, and sell the data to amazon to train their AI. Unless that database has been purged of PID, there would be the potential for abuse if it was sold or stolen for getting some free groceries.

JumpCrisscross 6y ago

> what if a bad guy figures out the ability to copy your palm print Then you would dispute the charge and have your own geolocation data or the store's video footage to substantiate your claim. This is a grocery store, not a diamond merchant.

frumper 6y ago
The problem isn't this one transaction. Of course you could dispute it, but you're in for a life of disputing charges as you can't tell the merchant to not accept your hand print and use a newly issued one like a card number when it is compromised
- NovemberWhiskey 6y ago
  The article says that you have to register the palm print vs a credit card. A common-sense approach would suggest that if you cancel the credit card, then registration also lapses. If you happen to have attracted the attention of this master counterfeiter who has duplicated your palm you would simply have the option of not registering your new card with the system. If this happens on a large scale, yes, the whole project is doomed.
  - pavel_lishin 6y ago
    What happens when you register with the next credit card? It's not like your palm print will change.
    - NovemberWhiskey 6y ago
      Don't do that then. If you find that someone has (somehow) managed to duplicate your palm print then you probably do not want to enroll with that option for payments in the future.
      - pavel_lishin 6y ago
        That's great advice for me - a person who's not going to register his palm anyway - but what would be your advice to Amazon for how to deal with this? Or what would be your advice to someone who wants to use their palm with a different credit card once their palmprint has been lifted and used to commit fraud?
  - frumper 6y ago
    Again, it's not that this specific issue can't be dealt with by canceling your palm print or convenient checkout. You're just left with not being able to safely register your palm print with any company if your biometric data gets stolen. I can envision a world where it doesn't take a master counterfeiter to 3d printer a palm print that gets through the scanner and a database of stolen palm print data people can buy and trade like they currently do with stolen credit card numbers. The issue is once your biometric data is compromised you have no recourse to regenerate it. Your solution is you just don't get to participate in these features anymore.
    - NovemberWhiskey 6y ago
      Yes, that's right. But what's the problem? You're back in the same place you are already. If this putative palm print duplication technology becomes widely available then people will stop building technology that depends on palm prints. As has been repeatedly pointed out, the risk lies with the merchants and the issuing banks (at least in the U.S.) for credit card payments. EDIT: and, at least in the U.S. again, no-one is going to be able to force you to use this technology; there will always have to be an alternative mechanism because there are people with no hands, and a system that required them would be a massive ADA liability.

text70 6y ago

Or create a palm reading fortune app that sells for 1.99, and sell the data to amazon to train their AI. Unless that database has been purged of PID, there would be the potential for abuse if it was sold or stolen for getting some free groceries.