Who Benefits?
"Microsoft promises to ease the pains of going passwordless " https://www.cnet.com/news/microsoft-promises-to-ease-the-pains-of-going-passwordless/
The report says “Roughly 200 million people using Microsoft services already have made the jump past passwords”. I would like to add “Who benefits?”
If ‘passwordless’ means ‘removal of the whole password family including PIN’, the ‘passwordless’ announcement was correct and this solution would be tantamount to an ATM that automatically dispenses your money against your bank card without asking for your PIN. Who benefits from this brilliant feat?
If those passwordless people were of the view that PIN, that is a numbers-only password, is not a password and therefore PIN can be used in a passwordless solution, who benefits from such misleading ‘PIN-dependent passwordless login’?
Unfortunately, too many security people are too indifferent to the true nature and characteristics of authentication factors.
Ref: “What We Know for Certain aboutAuthentication Factors”
* Attempts to compare the vulnerability of a wisely or poorly managed password with that of a poorly or wisely deployed physical token would obviously take us nowhere.
Key References
“Removal of Passwords and Its SecurityEffect”
"Aiming to Destroy Democracy?"
Digital Identity for Global Citizens
Image-to-Code Conversion by Expanded Password System
Summary and Brief History - Expanded Password System
Proposition on How to Build Sustainable Digital Identity Platform
Additional References
Account Recovery with Expanded Password System
External Body Features Viewed as ‘What We Are’
History, Current Status and Future Scenarios of Expanded Password System
Negative Security Effect of Biometrics Deployed in Cyberspace
Update: Questions and Answers - Expanded Password System and Related Issues (30/June/2020)
< Videos on YouTube>
Slide: Outline of Expanded Password System (3minutes 2seconds)
Digital Identity for Global Citizens (10minutes - narrated)
Demo: Simplified Operation on Smartphone for consumers (1m41s)
Demo: High-Security Operation on PC for managers (4m28s)
Demo: Simple capture and registration of pictures by users (1m26s)
Slide: Biometrics in Cyber Space - "below-one" factor authentication
< Media Articles Published in 2020 >
Digital Identity – Anything Used Correctly Is Useful https://www.valuewalk.com/2020/05/digital-identity-biometrics-use/
‘Easy-to-Remember’ is one thing ‘Hard-to-Forget’ is another https://www.paymentsjournal.com/easy-to-remember-is-one-thing-hard-to-forget-is-another/
Identity Assurance And Teleworking In Pandemic https://www.informationsecuritybuzz.com/articles/identity-assurance-and
Hitoshi Kokumaiの記事
ブログを見る
We today take up this report “NSA: We 'don't know when or even if' a quantum computer will ever be a ...
I would like to take up this somewhat puzzling report - “Google advises passwords are good, spear ph ...
Biometrics is 'probabilistic' by nature since it measures unpredictably variable body features of li ...
これらの仕事に興味があるかもしれない
- Dell Technologies Tokyo
Associate Inside Sales Representativeは、世界にイノベーションを提供する営業のスペシャリストです。担当する製品やサービスについて深く理解し、そのポートフォリオを把握します。インサイドセールスチームは、Associate Inside Salesが新規案件の初期段階で収集した技術的な情報や顧客ニーズをもとに、販売プロセスを進めています。 · 顧客との対話や関係構築を通じて、営業とテクノロジー業界に深く関わり、収益を生み出す機会を見極める ...
- myGwork - LGBTQ+ Business Community Tokyo
金融系プロジェクトにおいて基盤構築をリードする要員。現場の作業はSSOで可能だが、設計レビューや品質確認、お客様への報告や調整など社員として実施する。また、課題/問題発生時の迅速な対応や現地でのお客様業務チームとのコミュニケーションを即時性を持って実施する。 · インフラストラクチャー・スペシャリストは、インフラストラクチャー全般におけるプロジェクト・ベースの対象分野の専門家です。分析の提供、引き継ぎのための作業の文書化・図表化、タイムリーなソリューションの提供、および一般的に「必要なことを把握する」ことに優れています。これは実践的な役割であり、システム ...
- Kyndryl Tokyo
あなたはテクノロジーを通じて意義のある変化を推進することへの熱意がありますか? あなたはITストラテジーに長けており、お客様に影響を与えたいと考えていますか? · キンドリルのITストラテジー・コンサルタントとして、ドメイン、テクノロジー、業界の専門知識、コンサルティング手法、コグニティブ・アプローチを応用して問題を分析し、革新的なソリューションを作成することで、お客様と当社に価値を提供する責任を担っていただきます。 · ...
コメント