R.I.P. Password

R.I.P. Password

If you’re like me, you love a movie with a good plot…one filled with unexpected twists and turns that keeps your attention, and sprinkle in a little bit of emotional baggage, then add a R.I.P. Password murder plot to the mix, and you’ve got the next Oscar-winning movie! Throughout this type of movie, each moment is carefully planned to ensure viewer engagement and interest stays piqued. The same is true in the mobile world, only the plot here revolves around the murder of the password by biometrics. (Weird, scary music can be heard in the background.)

The setting opens up in the 1960’s where people used mainframes housed in an entire room. These time-sharing computers required a user to enter their login name and password, telling the computer who was sitting at the terminal and which files to make available. Back then, stealing someone’s password was a practical joke. There was only one computer where you could use your credentials and not too much personal information was displayed.

Fast forward 50 years, and look what the right password can do: allow you to read emails, order products, hijack cloud-storage accounts, even delete every trace of someone’s digital life! And, all this and more can be done anywhere as long as there’s an internet connection.

Here enters the character, PayPal, who in 2010 decided to consult with their head of security, a fingerprint security entrepreneur and a renowned cryptographer to establish an easier way to log into PayPal. Two years later, the FIDO Alliance was launched, a group trying to wean companies off passwords for good; hence, the murderer takes center stage to kill the password.

According to the members of FIDO, if people log into their computers with fingerprint readers, sites could log them in automatically using the Zero-Knowledge Proof protocol that proves a successful identification has been made without giving away details. Therefore, a single device could authenticate someone to the entire web.

Take the iPhone 5s, for example. You always have a finger with you and in this day, you always have your phone, so logging in isn’t an issue. The combination of finger and phone makes security much harder to break, and it looks like there’s no room for a password credential.

This never-ending story came to a halt on April 11th with the arrival of Samsung’s new Galaxy S5, complete with a fingerprint reader, but this reader is special. It plugs directly into PayPal which connects the user to dozens of different payment systems. Instead of a password, all that’s needed is a fingerprint to carry the user through the entire web.

RIP password.

About the Author

Ginger Hill is Group Social Media Manager.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3