4 ms·
>there is no “password reset” when it comes to iris data This is the most critical part, I think. If my Iris scan is leaked (which is not hard to do, from modi
by kgeist 3y ago
>there is no “password reset” when it comes to iris data
This is the most critical part, I think. If my Iris scan is leaked (which is not hard to do, from modified Orbs, similar to credit card skimmers, to mobsters scanning people's irises under threat of death), my identity will be stolen and I can't do anything about it. Do they have at least some sort of 2FA?
- hef19898 3y agoThey didn't have it neither in Demolotion Man, and it worked great!
- wmf 3y agoI think their plan is that if you re-scan your eyes the system revokes any previous (sold/stolen) identities associated with your eyes and issues you a new one, like a password reset process. This doesn't help if someone can use a leaked hash to trigger the reset process though.
- treyd 3y agoIs there any reasonable way to make this work that doesn't involve the company keeping plaintext copies of Iris scans and/or retaining the ability to arbitrarily reset account keys on the ledger (such that users have to trust them to behave honestly)? What happens if a modified Orb is used to dumo the scans and then later trigger a fake reset?
- 93po 3y agoModified orbs won't be able to add iris scans
- tim333 3y ago(Scanned yesterday). I don't think this is about identity. You don't have to give any when you scan - you can claim to Mickey Mouse for all they care. It's more a way to distribute shitcoins evenly.