Brutkey

Epic Null
@Epic_Null@infosec.exchange

@poller@infosec.exchange It doesn't matter where you store it. The nature of biometrics is the following:
You always have it with you
It is mostly public knowledge
It cannot be changed

This means if you get phished once (for DNA) or have a high enough quality photo/video of yourself posted online, you become forever compromised. That's assuming there are no leaks or vulnerabilities in literally any of the tools that subscribe to this authentication method.

Epic Null
@Epic_Null@infosec.exchange

@poller@infosec.exchange Also you explicitly mentioned blockchain - a storage system intentionally designed to be public.

Jack Poller
@poller@infosec.exchange

@Epic_Null@infosec.exchange You have a fundamental misunderstanding of blockchain.

Blockchain technology provides a decentralized immutable ledger. Blockchains can be public, private, or permissioned.

You can learn more about 1Kosmos' use of blockchain at https://www.1kosmos.com/blockchain/

Epic Null
@Epic_Null@infosec.exchange

@poller@infosec.exchange Well... the page is immediatly trying to sell me on the tech and emphasizes style over content. Not a great start.

I notice cryptocurrency is mentioned. Bit concerning, but that is the most well known use of blockchain

(pretend pic is here)

I am seeing news-like articles if I scroll down (We sponsored a golf tournament!), but nothing explaining the choice of technology. Is there a lengthy article I am missing that provides some explination of why you would want to use blockchain - or even decentralization - for something like authentication?

Decentralization makes sense if you have something you want to be public record, and fully owned/controlled by no one. For a private system, I am gonna need a stronger argument.

Jack Poller
@poller@infosec.exchange

@Epic_Null@infosec.exchange The world has moved blockchain technology way past its original concept of public cyrptocurrency.

Private blockchain is a well-understood concept being implemented in many different industries.

Decentralization and blockchains -- public and private -- are used to eliminate a single point of failure when building an immutable ledger.

An immutable ledger has many applications outside of cryptocurrency.

Epic Null
@Epic_Null@infosec.exchange

@poller@infosec.exchange Bold claims, but... I haven't seen anything to back up that blockchain is a good idea privately, nor did I see anything on the page you linked to that actually makes the argument for your claims.

If anything, I have seen blockchain as an expensive replacement for existing technologiee that suddenly presents problems when you run into edge cases only a few inchew from the common case.

If you're gonna convince me it 1. Is actually useful, and 2. Belongs in an authentication system, you're gonna need to actually defend the claims, noy just state them.

And no, I did not miss that you focused on the comment I had where I was like "alright... fair" and ignored the bigger issue - the link doesn't shoew me anything useful or relevant to the discussion!