Hitoshi Kokumai ブログ

I would like to take up this somewhat puzzling report - “Google advises passwords are good, spear phishing is bad, and free clouds get attacked” https://www.theregister.com/2021/11/25/google_cybersecurity_action_team_threat_horizons/ · It reads “Google advises passwords are good, ...

Some friends directed my attention to this news report - · “Biometric auth bypassed using fingerprint photo, printer, and glue” https://www.bleepingcomputer.com/news/security/biometric-auth-bypassed-using-fingerprint-photo-printer-and-glue/ · It looks like correct in saying "A f ...

Today's topic is this report - “How blockchain technology can create secure digital identities” · https://ibsintelligence.com/blogs/how-blockchain-technology-can-create-secure-digital-identities/ · The title of this report reads “How blockchain technology can create secure digit ...

There is actually a valid methodology that enable us to maximize the entropy of the secret credentials for solid identity assurance and, at the same time, enables us to minimize the burden of managing the secret credential. · Too good to believe? · It’s real. We only need to foll ...

I take up this report today - “Facebook's metaverse plans labelled as 'dystopian' and 'a bad idea'” · https://www.bbc.com/news/technology-59154520 · I am not knowledgeable enough to be able to judge whether ‘Metaverse’ itself is a good or bad idea, but it is not hard for me to j ...

Another topic for today is “Passwordless made simple with user empowerment” · https://www.securitymagazine.com/articles/96431-passwordless-made-simple-with-user-empowerment · Imagine a world where quantum computing has made a quantum leap and destroyed the public-key infrastruct ...

Today's topic is BBC's “Facebook to end use of facial recognition software” · https://www.bbc.com/news/business-59143323 · It is good to see BBC now mention ‘accuracy’ in the report besides other concerns, but not good enough as yet; they still do not refer to the probabilistic ...

I today take up this The Register report - “Client-side content scanning as an unworkable, insecure disaster for democracy” · https://www.theregister.com/2021/10/15/clientside_side_scanning/ · Glancing over this worrying report, I found this paragraph especially eye-catching; “I ...

The quantum computer held in a bad guy’s hand is indeed a big threat. So is the artificial intelligence that has gone out of control. · However, a yet bigger threat comes from the humans who are indifferent to the power and value of humans' volition and memory. · Worst would be ...

https://aitechtrend.com/quantum-computing-and-password-authentication/ · My latest article titled ‘Quantum Computing and Password Authentication’ was published by NY-based aiTech Trend. · https://aitechtrend.com/ · Below is the gist. · -Quantum computing, however powerful, canno ...

I got interested in this article -on the password problem · “Tech Q&A” · https://www.unionleader.com/nh/lifestyles/tech-q-a-safeguarding-against-password-hackers/article_16d3629e-b5ba-550b-b2ac-6070403f61a4.html · Their answer is “The best defense against brute force and dictio ...

I take up this new report today - “Researchers Defeated Advanced Facial Recognition Tech Using Makeup” https://www.vice.com/en/article/k78v9m/researchers-defeated-advanced-facial-recognition-tech-using-makeup · The report says “The experiment saw 100 percent success in the digita ...

“Expanded Password System is no bad, but we do not need it. · We can rely on password managers that are protected by a single strong password. · Password predicament is already sort out by password managers”. This is what we often hear here and there. · Then, what if we come up ...

Today's topic is “Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials” · https://www.theregister.com/2021/09/22/microsoft_exchange_autodiscover_protocol_found/ · It appears to be next to impossible for any talented servicers to locate all ...

Our password headache may well be the consequence of these dual causes - · ‘Use of Impracticable Password’ and ‘Non-Use of Practicable Password’ · Everyone grumbles at the former, while few are well awake to the latter. · For more about the latter, you could refer to this post –“ ...

Bad guys, who have a quantum computer at hand, would still have to break the part of user authentication that is not dependent on the public-key scheme, prior to accessing the target data, in the normal environment where secret credentials play a big role; quite a few cryptograph ...

Taken up today is this TechRepublic report on voice print as a new password - https://www.techrepublic.com/article/your-voiceprint-could-be-your-new-password-as-companies-look-to-increase-security-for-remote-workers/ · Instead of “Your voiceprint could be your new password as com ...

Biometrics is 'probabilistic' by nature since it measures unpredictably variable body features of living animals in ever changing environments. · – FAR and FRR are not the variables that are independent from each other, but are dependent on each other · – the lower a FAR is, the ...

We today take up this report “NSA: We 'don't know when or even if' a quantum computer will ever be able to break today's public-key encryption” · https://www.theregister.com/2021/09/01/nsa_quantum_computing_faq/ · Conclusion of this report: · “In a world where users will divulge ...

We’ve come up with a slide presentation for “Bring a healthy second life to your legacy password system” · “We do not have to replace or rebuild the existing text password systems for making use of episodic memory; images of our episodic memory can be turned into a high-entropy c ...