How Apple and Google will kill the password

http://www.computerworld.com/s/article/9206998/How_Apple_and_Google_will_kill_the_password_

by ssclafani • 15 years ago

40 34 15 years ago

bpeters• 15 years ago

Our phones would become our keys and passwords, and I am assuming they would be the devices that read our biometric ID and then allow access to other devices and services.

Only problem, and one preventing this becoming a real solution is the fact that people lose and forget their phones. If I can't have access to my daily services and devices without my phone then I am stuck in a worse position than I was before passwords.

The solution to access and protection shouldn't come from a change in the key, but a change in the lock.

ThomPete• 15 years ago

Your phone is the one accessory you are most likely to be aware of.

spooneybarger• 15 years ago

I know many people who go through 2-4 phones a year. They always lose it at least once a year. Sometimes as often as every 3-4 months.

On the same kind of note... the keys to my apartment are the most important thing I need to grab before I leave. Yet, once every 6 weeks I leave w/o them. Any system has to recongize that the keys will be lost and make them fairly easy to replace.

kia• 15 years ago

Single page:

http://www.computerworld.com/s/article/print/9206998/How_App...

brudgers2• 15 years ago

Both visions require the surrender of vast amounts of personal data to private companies and allowing private companies control of web access and fund transfers. It is easy to see Apple denying your local adult emporium the use of its system for purchases and it is even easier to see Google ID's used to tailor search results in line with Google's commercial interests (since that already happens).

CoffeeDregs• 15 years ago

Two notes:

1) The article spoke mostly about the phone being used for authentication. This doesn't necessarily mean that the authentication system has vast amounts of PII.

2) If the authentication system does become the repository for vast amounts of personal data, then the concern is really for consolidation. You've already surrendered vast amounts of data to Visa, Amazon, Google, Apple, NetFlix, etc. Seems you're worried about it being consolidated.

brudgers2• 15 years ago

The ability to link an individual's financial data and purchasing history directly to their a complete history of their internet use would appear to be the one ring to rule them all in terms of advertising and data mining.

I agree there is nothing that necessitates a phone based authentication system requiring vast amounts of PII. However, there are strong incentives toward collecting it and both companies have a history of doing so whenever possible.

calvinfroedge• 15 years ago

Exactly. Thank you, but I'll stick with my ridiculously long keychain of randomly generated strings.

cma• 15 years ago

Credit card companies already do it (see Visa and Mastercard on Wikileaks a few weeks back).

dangero2• 15 years ago

More likely scenario in the next 10 years would be making purchases with your phone by entering a password or pin on the screen of your phone to confirm.

The Biometric portion is a little bit sensationalist at this point because the less invasive Biometric techniques are not accurate enough to verify with 100% accuracy that you have your phone in your pocket. If I have to take a photo of my eye to complete the purchase using my phone, I think I'd rather enter a password.

I think the easiest way around the biometric thing is to put an NFC chip under the skin to handle a public/private key exchange. This is the best way to verify your identity because even a DNA test would not prove that you are present in any way.

il• 15 years ago

The reason ATMs don't have fingerprint readers is that thieves would cut off fingers. A chip under the skin would lead to similar unpleasantness.

hrktb• 15 years ago

They do in some countries. The problem seems to be the upgrade of your ATMs all over the country and all third party ATMs to add a biometric reader too.

dangero2• 15 years ago

Good point that I hadn't considered.

j15e• 15 years ago

MasterCard paypass does a great job so far for paying fast

beoba4• 15 years ago

To avoid someone making a 'contactless swipe' of my credit card information, I drilled the chip out of my card:

http://consumerist.com/2007/08/how-to-de-rfid-your-credit-ca...

blahedo• 15 years ago

My phone is both easier to steal and harder and more expensive to replace than my passwords. Marvelous.

naner• 15 years ago

So is your credit card. At least your phone can be locked.

guptaneil3• 15 years ago

and remote wiped, which combined with the biometric scanner, makes it far more secure than anything else you have to carry around right now.

Groxx3• 15 years ago

With a 4 character password, which won't keep out anyone with a bit of free time. And remote-locking solutions are non-solutions for anyone determined and intelligent - just stick it in a Faraday cage.

guptaneil3• 15 years ago

Life is just full of coincidences. I was just discussing how my iPhone should be able to replace my passwords last night, and wrote a blog post about my ideal car that is controlled by my phone.

My only concern in both of these cases though is what happens when my phone runs out of battery? Nobody seems to have an answer for that.

myoldryn• 15 years ago

Mobile ID isn't anything new. In my home country (Estonia) there is already fully functioning mobile id system, which works almost with every mobile phone and is considered as secure as smart-cards.

http://www.id.ee/public/Mobiil_ID_animation/ <<< This clip shows how it basically work.

EDIT: http://www.ria.ee/27525 <<< some more info, if anyone is interested.

alanfalcon• 15 years ago

That'll be great until you drop your phone in a river or the battery dies.

martyhu• 15 years ago

The problem I see with this isn't having to carry your phone around everywhere - its the biometric system itself.

Biometric systems are much less usable than passwords. Users often fail them by doing things like putting their fingers in the wrong place on the sensor or by not looking directly into the camera.

I think probably that users will need to be somewhat trained in order for this to work well. Probably the hackers will train themselves too.

Stealing fingerprints from someone at a bar? Not so farfetched.

contextfree• 15 years ago

I've heard this sort of thing has already existed in Japan for some time?

jefe78• 15 years ago

This is old news. I've been doing this for years with my phone's blue-tooth + proximity detection.

Groxx3• 15 years ago

Meh. We were told the same thing about voice recognition, RFID, and computers in general. I'll a) believe it when I see it, and b) still want more control over things like this, which will likely require a password in some form.

xorglorb• 15 years ago

And in 4 years, you will see this title instead:

Mobile phone theft rose 1200% in 2014, is the password the way of the future?

How Apple and Google will kill the password

Related Stories