4 ms·

Presumably the orbs produce a verifiable type of hash. E.g. whatever output it has is also encrypted with their private key + some salt and you can always check

by Tenoke 5y ago

Presumably the orbs produce a verifiable type of hash. E.g. whatever output it has is also encrypted with their private key + some salt and you can always check if what a user provides has that.

New_California 5y ago
You don't understand what a hash is.
- ta23adesrg 5y ago
  Your confidence in your own reading comprehension is unjustified. They are simply describing signing the hash.
exo762 5y ago
It can be done in following way. Orb can have a baked-in private key (on hardware level). Public keys are stored in the blockchain. Each hash is signed by the private key stored in the orb.
- mhluongo 5y ago
  That implies a centralized signing authority though. We could do all of that without the retina scanning using normal old KYC
  - Tenoke 5y ago
    The orbs are centralized either way. And I personally am less worried about someone having a hash of my eyeball data than my passport and everything else.
- gcr 5y ago
  That's orthogonal to the point. Here's the scenario: 1. User has a "fake" biometric A, generated via GAN or [1], that's cheap and easy to produce. 2. Suppose they can present A to any orb device, generating hash(A), which signs hash(A) using its built-in private key as usual. As long as the user can generate a fake iris biometric scan accepted by an orb, no other part of the system needs to be compromised for this attack to work. 1: http://iab-rubric.org/papers/ICPR14_1649_FI.pdf http://iab-rubric.org/papers/ICPR14_1649_FI.pdf , note that liveness detection is a cat-and-mouse game
  - exo762 5y ago
    See my original post. It's pretty clear that process of initial distribution of tokens is not open. Volunteers are likely contributing lots of private data to the company to get their hands on orbs.
yissp 5y ago
Would it not just be a matter of time until the orbs are reverse-engineered and you can sign arbitrary input? Especially if this currency were to actually gain significant popularity.

by Tenoke 5y ago

Presumably the orbs produce a verifiable type of hash. E.g. whatever output it has is also encrypted with their private key + some salt and you can always check if what a user provides has that.

New_California 5y ago

You don't understand what a hash is.

ta23adesrg 5y ago
Your confidence in your own reading comprehension is unjustified. They are simply describing signing the hash.

exo762 5y ago

It can be done in following way. Orb can have a baked-in private key (on hardware level). Public keys are stored in the blockchain. Each hash is signed by the private key stored in the orb.

mhluongo 5y ago
That implies a centralized signing authority though. We could do all of that without the retina scanning using normal old KYC
- Tenoke 5y ago
  The orbs are centralized either way. And I personally am less worried about someone having a hash of my eyeball data than my passport and everything else.
gcr 5y ago
That's orthogonal to the point. Here's the scenario: 1. User has a "fake" biometric A, generated via GAN or [1], that's cheap and easy to produce. 2. Suppose they can present A to any orb device, generating hash(A), which signs hash(A) using its built-in private key as usual. As long as the user can generate a fake iris biometric scan accepted by an orb, no other part of the system needs to be compromised for this attack to work. 1: http://iab-rubric.org/papers/ICPR14_1649_FI.pdf http://iab-rubric.org/papers/ICPR14_1649_FI.pdf , note that liveness detection is a cat-and-mouse game
- exo762 5y ago
  See my original post. It's pretty clear that process of initial distribution of tokens is not open. Volunteers are likely contributing lots of private data to the company to get their hands on orbs.

yissp 5y ago

Would it not just be a matter of time until the orbs are reverse-engineered and you can sign arbitrary input? Especially if this currency were to actually gain significant popularity.