Endpoint

8/4/2016
09:40 AM
Terry Sweeney
Terry Sweeney
Slideshows
Connect Directly
Facebook
Twitter
RSS
E-Mail
50%
50%

8 Alternatives to Selfie Authentication

How to definitively prove your identity? A variety of anatomical parts and functions may soon be able to vouch for you.
Previous
1 of 9
Next

Image Source: Teknoeric, via Wikimedia Commons

Image Source: Teknoeric, via Wikimedia Commons

With MasterCard deciding to test the selfie as an authentication method for payments earlier this year, we cheered that the self-authentication conversation had moved beyond fingerprints and retinas. It's a welcome changeup that taps into facial recognition and also requires users to blink into a live camera to ensure it's not a photo of a selfie.

It also got us thinking about other common, readily access physiological features that would determine beyond a doubt, that's you.

So many candidates have come and gone in the last several years. Gait recognition, which collects data on how we walk, emerged post-9/11 for potential use in airports. Voice recognition remains in play, but has challenges with ambient noise, making it difficult to use in a shopping center, on the street or in an airport.

But the more we dug into this, the more we came to agree with noted security expert (and pop singer) John Mayer, that indeed, your body is a wonderland. Researchers and startups are using all kinds of body parts to uniquely and definitively identify us. We've highlighted some candidates here as well as a few that are, well, lighter in spirit.

In the meantime, once you're done closing your left eye and sticking out your tongue to pay down your credit card balance, check out our suggestions for futuristic authentication alternatives and let us know in the comments what we missed.

 

Terry Sweeney is a Los Angeles-based writer and editor who has covered technology, networking, and security for more than 20 years. He was part of the team that started Dark Reading and has been a contributor to The Washington Post, Crain's New York Business, Red Herring, ... View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
seoweavers
50%
50%
seoweavers,
User Rank: Strategist
9/13/2016 | 2:38:02 AM
Great article
Great article you have here. I wanted to make mention of an additional alternatives we are developing called Flickup. It allows you to connect with nearby users to request a photo be taken, yet never have to hand over your phone. We are still in our development stage but if you sign up, you'll be notified once the app hits the Apple and Android app stores!
Government Shutdown Brings Certificate Lapse Woes
Curtis Franklin Jr., Senior Editor at Dark Reading,  1/11/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: On the SS7 network, nobody knows you're a dog.
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-5740
PUBLISHED: 2019-01-16
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is i...
CVE-2018-5741
PUBLISHED: 2019-01-16
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update ...
CVE-2016-9778
PUBLISHED: 2019-01-16
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met th...
CVE-2017-3135
PUBLISHED: 2019-01-16
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1...
CVE-2017-3136
PUBLISHED: 2019-01-16
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were me...