4 ms·
What if iris scanning becomes the new "log in with your device", and what if the way worldcoin stores your iris scan is actually not encrypted? I don't know wh
by vasco 3y ago
What if iris scanning becomes the new "log in with your device", and what if the way worldcoin stores your iris scan is actually not encrypted?
I don't know why you're comparing a high definition full iris scan to random photo of you, they aren't the same things. The point is security is made of things you know and things you have, and eyes are hard to pass around, so someone being able to "have" your eyes to fool a scanner is useful for many classes of attacks, we don't need to know the full attack chains yet to know it's inherently a risk because it turns a thing you have into a thing you and Worldcoin and whoever worldcoin sells or gets hacked by - all have.
- justinclift 3y ago> ... what if the way worldcoin stores your iris scan is actually not encrypted? Even if it's encrypted, if worldcoin gets breached in a particularly bad way (say root to their production servers) then the unencryption mechanism and keys could be leaked along with the encrypted data. The point being that just because something is encrypted doesn't make it foolproof against everything.