4 ms·
What happens when this method meets the general public, huge numbers of which consistently lose things, or fail to understand basic security measures (sometimes
by vacri 11y ago
What happens when this method meets the general public, huge numbers of which consistently lose things, or fail to understand basic security measures (sometimes wilfully)?
Any system based on "so, you have this physical|virtual thing, right..." is going to run into troubles when it meets the general public.
- jsmthrowaway 11y ago> Any system based on "so, you have this physical|virtual thing, right..." is going to run into troubles when it meets the general public. ...like driver's licenses, national ID cards (some smart), CACs, credit cards, keys, and smartphones?
- ams6110 11y agoPeople understand ID cards and phones. Once it gets into things like passphrases, keys, salts, etc. 98% are lost. I work with students (some are Ph.D. candidates) in computer science who can't keep public/private SSH key pairs straight.
- vacri 11y agoDid you notice that the GP was suggesting to do away with all of those things and replace it with a single doohickey? People lose each of the things you list every day. They can generally prove who they are to the relevant vendor with the other things they haven't lost yet. How do you do that with a single doohickey? And, as ams6110 mentioned, none of the things in your list require anything like 2FA - perhaps a PIN code on the bank card, but that's it. And those codes are generally four numeric digits. That's the level you need to pitch at for 'general public' consumption.