3 ms·
Leads me to believe the world will need some kind of biometric cryptographic signatures for anything we do online to show it's being done by a real human. For e
by likeabbas 4y ago
Leads me to believe the world will need some kind of biometric cryptographic signatures for anything we do online to show it's being done by a real human. For example, your iPhone would need to run FaceID anytime you wanted to post to hacker news. Not sure that's a world I want to live in
- mmsc 4y ago>your iPhone would need to run FaceID anytime you wanted to post to hacker news You can already pay people to do things for you, using their "online identity". This will just continue that.
- foobarbecue 4y agoHm. Biometric captchas. I wonder if that is feasible. Maybe the internet sends you a DNA sequence and you have to inject it, translate it and then image the folded protein (computers are ok at protein folding but not great yet)
- likeabbas 4y agoI answered my idea in another thread. tl;dr Apple would be the certificate authority that can verify a public key came from an iPhone that had biometric authentication enabled, but apple won't tell the website who the user is.
- loudmax 4y agoWhen you put it that way it sounds like a nuisance, but surely that could be resolved through better UX engineering. Deciphering a captcha or staring at a camera each time you want to post are real annoyances and such a site probably wouldn't get much traction. But if the right infrastructure were in place, a lot of us would be happy to participate in a community where we're confident that everyone there is an actual person, not a spambot or a sock puppet. The right infrastructure here could a tall order, but I don't think this is an impossible problem.
- likeabbas 4y agoI agree it would be useful for some communities. I just don't want it to be the default way I interact with every website
- tluyben2 4y agoHow do you know it’s being done by real human when you only know a real human posted it? The KYC'd person didn’t have to write it; they could've used AI or another person or copied it etc. This has been lost already; I don’t think communities should filter on humans, but on high quality aka correct, informative, well written etc.
- likeabbas 4y agoMy thought process is * The iPhone stores your biometric data in its Secure Enclave * The Secure Enclave also holds the cryptographic private keys * Every action you do against the server requires your phone to add a cryptographic signature, which can only be written when the iPhone verifies you via FaceID Apple could act as the Certificate Authority letting websites know that this signature aligns with an iPhone user. Apple may not need to let the website know exactly who performed the action, but just say that Apple verifies that this is a real person making the action.