Is that really that impractical? With a quick calculation 50 ms time offset would mean about 20 meter difference. You can get that accuracy with NTP over residential internet and a better TCXO could hold that for a day.…
> We shouldn’t just give up because everything is inherently insecure. True, but no sane way to mass revoke Passkeys from stolen / lost device is just bad design.
That could work, but then the service needs to implement complex non standardized authentication mechanism outside of Passkeys. You will have 14 different services with 15 different options. I don't think that's really…
> It is not feasible to remove password login or some other recovery login method. Then passkeys doesn't provide any real value if you have other less secure recovery option. Let's say I have a bank account, going to…
> You generate another passkey is your answer. How do you do that? The exact same way you do today. How can I do that, if Passkeys are the only option to log in? If I can just use a password to log into a website…
I don't think that would work either. Let's say I have a new account and a single Passkey in the TPM of PC1. I want to log in from PC2, too. How can I do that? (I know there is some trickery with Bluetooth, but I…
The enforcement of GDPR is more or less nonexistent for big companies. Even if they get fined, that is just cost of business for them. In the text nothing prevents the manufacturer to stream the vide of your face to…
> Use short expirations And now you can use time correlation attack to unmask people.
I think that depends on how do you define PII. I suspect the ZKP proof or token is practically unique and related to you, so I could be personal data if you use the definition from GDPR. With ZKP the entity and the…
It is not using ZKP. Zero knowledge proof is mentioned as an optional experimental feature in the next release. https://ageverification.dev/av-doc-technical-specification/d...
> if I wanted to buy a device with a new type of connector, I should have been able to You are. Nothing prevents the manufacturers to support other better charging solutions than USB-C. In fact many notebooks has their…
Some people argue that it is just for more government surveillance and control, but the government already could access your bank and card transactions and freeze or confiscate your money.
The difference is more a financial or legal thing, than a technical one. From an users' perspective paying with digital Euro would work more-or-less the same as you pay today with card, bank transfer or something based…
It gets interesting when the two system interacts. Friends visiting the US told me that at the POS terminal they had to choose credit card despite paying with a Visa/Mastercard debit card issued by an European bank. By…
AFAIK the ECB wants to have both things. Digital Euro being a CBDC could open up a lot of possibilities, but they want an unified payment system, too, and that would be a nice first job for digital Euro.
Not really. Euro cash today is paper / plastic banknotes and metal coins. Your account in the bank is not really cash you own, it is more like the banks liability towards you. If your bank fail, you loose the money you…
I theory it should be more. The ECB claims you will be able to hold and spend a (limited amount of) digital euro offline (without internet connection).
That's interesting argument. Here it is usual to have a daily limit on debit cards. You can not spend more money than that, so a thief can not drain your account. Also many banks give you multiple accounts (you can…
Probably it depends on what part of the world you are and on what is your goal, what you want to optimize for. In many countries there are usual systematic weather events where all renewable production goes to basically…
Microchip has some "chip-scale atomic clock"s, not much bigger than an OCXO, but a lot more expensive. https://www.microchip.com/en-us/product/csac-sa65
> They also over index fear of LargeCo stealing IP That seems to be a bold statement considering the whole business of this LargeCo is based on stolen IP.
This. If AMD / Xilinx would publish the documentation what you would need to use their chips, probably very few would use Vivado or ISE.
Not yet, but it is easy to imagine many ways it would be used for DRM.
> The point of SynthID is to make generated images identifiable, in an attempt to prevent 1984-esque situations where you can't believe your eyes and ears. You can still use traditional methods to manipulate images,…
Maybe that's changes by country, but here bank transfers are basically final and can not be cancelled or recalled. Why would a bank cover your losses from their profits?
Is that really that impractical? With a quick calculation 50 ms time offset would mean about 20 meter difference. You can get that accuracy with NTP over residential internet and a better TCXO could hold that for a day.…
> We shouldn’t just give up because everything is inherently insecure. True, but no sane way to mass revoke Passkeys from stolen / lost device is just bad design.
That could work, but then the service needs to implement complex non standardized authentication mechanism outside of Passkeys. You will have 14 different services with 15 different options. I don't think that's really…
> It is not feasible to remove password login or some other recovery login method. Then passkeys doesn't provide any real value if you have other less secure recovery option. Let's say I have a bank account, going to…
> You generate another passkey is your answer. How do you do that? The exact same way you do today. How can I do that, if Passkeys are the only option to log in? If I can just use a password to log into a website…
I don't think that would work either. Let's say I have a new account and a single Passkey in the TPM of PC1. I want to log in from PC2, too. How can I do that? (I know there is some trickery with Bluetooth, but I…
The enforcement of GDPR is more or less nonexistent for big companies. Even if they get fined, that is just cost of business for them. In the text nothing prevents the manufacturer to stream the vide of your face to…
> Use short expirations And now you can use time correlation attack to unmask people.
I think that depends on how do you define PII. I suspect the ZKP proof or token is practically unique and related to you, so I could be personal data if you use the definition from GDPR. With ZKP the entity and the…
It is not using ZKP. Zero knowledge proof is mentioned as an optional experimental feature in the next release. https://ageverification.dev/av-doc-technical-specification/d...
> if I wanted to buy a device with a new type of connector, I should have been able to You are. Nothing prevents the manufacturers to support other better charging solutions than USB-C. In fact many notebooks has their…
Some people argue that it is just for more government surveillance and control, but the government already could access your bank and card transactions and freeze or confiscate your money.
The difference is more a financial or legal thing, than a technical one. From an users' perspective paying with digital Euro would work more-or-less the same as you pay today with card, bank transfer or something based…
It gets interesting when the two system interacts. Friends visiting the US told me that at the POS terminal they had to choose credit card despite paying with a Visa/Mastercard debit card issued by an European bank. By…
AFAIK the ECB wants to have both things. Digital Euro being a CBDC could open up a lot of possibilities, but they want an unified payment system, too, and that would be a nice first job for digital Euro.
Not really. Euro cash today is paper / plastic banknotes and metal coins. Your account in the bank is not really cash you own, it is more like the banks liability towards you. If your bank fail, you loose the money you…
I theory it should be more. The ECB claims you will be able to hold and spend a (limited amount of) digital euro offline (without internet connection).
That's interesting argument. Here it is usual to have a daily limit on debit cards. You can not spend more money than that, so a thief can not drain your account. Also many banks give you multiple accounts (you can…
Probably it depends on what part of the world you are and on what is your goal, what you want to optimize for. In many countries there are usual systematic weather events where all renewable production goes to basically…
Microchip has some "chip-scale atomic clock"s, not much bigger than an OCXO, but a lot more expensive. https://www.microchip.com/en-us/product/csac-sa65
> They also over index fear of LargeCo stealing IP That seems to be a bold statement considering the whole business of this LargeCo is based on stolen IP.
This. If AMD / Xilinx would publish the documentation what you would need to use their chips, probably very few would use Vivado or ISE.
Not yet, but it is easy to imagine many ways it would be used for DRM.
> The point of SynthID is to make generated images identifiable, in an attempt to prevent 1984-esque situations where you can't believe your eyes and ears. You can still use traditional methods to manipulate images,…
Maybe that's changes by country, but here bank transfers are basically final and can not be cancelled or recalled. Why would a bank cover your losses from their profits?