Pay with Palm - eviltoast

I can only see this going into a very dystopian path. Based on their actions, I don’t trust these companies, their security practices, nor their privacy policies. Why would I give them my biometrics? And my full palm, at that!? Hell no!

  • Mojojojo1993@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    4
    ·
    1 year ago

    I don’t get the issue with it ? Why wouldn’t fingerprint be the best way to pay for stuff ?

    • 𝕸𝖔𝖘𝖘@infosec.pubOP
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      1 year ago

      For the same reason this isn’t a good idea. Privacy aside, when your biometrics get leaked (and they will), you’ll have no recourse, because biometrics are literally a part of your body and you can’t change them.

      • Mojojojo1993@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        How do biometrics get leaked ? Can they 3d print my finger ? What difference does it make to all my dsta getting sold on the daily ? I don’t see how it changes things

        • 𝕸𝖔𝖘𝖘@infosec.pubOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          They don’t need to 3D print anything, only to “side load” the hash (it’s more complex than that, but that’s the gist). If your ID is tied to your finances, and it gets leaked, you can’t change your ID. Your finger/palmprint is always your finger/palmprint.

          • Mojojojo1993@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            Right. But can’t they do that anyway? Your ID is linked to your finances. You get people stealing IDs all day everyday.

            Family Guy did an episode on it.

            If I’ve got your records you I’d birth certificate your job numbers your state details. Address phone emails passport passwords. I’m you. Except I have my biometrics.

            Biometrics cannot be forcibly taken. I can’t rock up to the bank manager with a severed finger. Yet I can take out a loan in your name without the fingerprint.

            For fuck sake our security relies on signature. A badly written name.