Google Autofill tests biometric authentication for passwords and payments

https://www.xda-developers.com/google-autofill-biometric-authentication-passwords-payments

https://nakedsecurity.sophos.com/2020/01/14/google-tests-biometric-authentication-for-android-autofill


#google #biometrics #password #payments #fp

Fortnite for Android has also been kicked off the Google Play Store

You can still install it directly from Epic, however

Following its removal from the Apple App Store, Fortnite has also been kicked off of the Google Play Store for Android. Earlier today, Epic Games snuck in an update for both the iPhone and Android versions of the game that allowed users to pay Epic directly for in-app purchases instead of using the officially sanctioned system for both platforms.

What followed was a wild ride: Apple kicked Fortnite off the App Store, then Epic sued Apple, and finally there was an in-game video parodying Apple’s own 1984 commercial, positioning Apple itself as the monopolist.

https://www.theverge.com/2020/8/13/21368079/fortnite-epic-android-banned-google-play-app-store-rule-violation

https://www.engadget.com/fortnite-android-225437892.html

https://youtu.be/euiSHuaw6Q4


#Google #apple #fortnite #appstore #playstore #payments #EpicGames

Amazon One lets you pay with your palm

Amazon wants its palm recognition technology in stores, stadiums, and office buildings.

Amazon is unveiling its own palm recognition technology today that will be used initially to turn your hand into a personal credit card inside the company’s physical retail stores. Amazon One uses the palm of your hand to identify you, using a combination of surface-area details like lines and ridges, alongside vein patterns to create a “palm signature.”

👀 👉🏼 https://www.theverge.com/2020/9/29/21493094/amazon-one-palm-recognition-hand-payments-amazon-go-store

#amazon #DeleteAmazon #palm #recognition #payments #video #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Oh dear. Signal now includes payment.

This is basically a bad idea, because it makes Signal a target for scammers. At the moment, it's just a target for intelligence agencies. Bad enough.

But Signal is not only adding payments. No, no. Signal is building in blockchain.

That's the final nail in the coffin. I've already stopped recommending Signal since they put in that disastrous pin update. Content-wise, it meant they were uploading your phonebook to the cloud. Wasn't as clearly communicated, but that was that. They do a pack of bullshit voodoo about your pin, then they use it to encrypt your phonebook, and then they upload it to the cloud.

Because smartphones don't do well at all for entering text or passwords, the pin is either useless because you can't get it entered, or it's useless because it has too little entropy and could just be tried through on the server.

And Signal didn't make this crappy pin opt-in but forced it on everyone once. That was the moment since when I stopped using Signal.

But now? Make a blockchain bullshit sandwich out of it too?

And not even a real blockchain but some voodoo handwaving hybrid snake oil.

I took a closer look at it last year. The whole thing is based on Intel SGX. That's Intel's enclave voodoo tech. According to Signal, it works like this: their crypto blockchain voodoo tech is open source and you can build it yourself. Then you can take a crypto checksum from it. Then you ask a proprietary unverifiable closed-source cloud service from Intel, and it will tell you the checksum from the stuff in the SGX enclave. Then you can see that the software was unmodified.

How does Intel's proprietary unverifiable closed-source voodoo service in the cloud know the checksum of the software in the SGX enclave? Well, it relies on Intel's proprietary unverifiable closed-source voodoo ware in your Intel CPU (in the management engine that Intel imposes on all customers in a non-disable way) with SGX.

You can already see: It's been a long time since I've been so unconvinced by a concept. The number of layers of "don't look too closely here" level crypto is staggering. The humanists among you will know the word meaning of crypto, and at this point enjoy the irony of crypto-voodoo being used here as a flimflam ingredient for a bullshit cocktail of wild diversionary hand movements otherwise only known from hat players and stage magicians.

https://blog.fefe.de/?ts=9e9221ad

#signal #payments #komment #thinkabout
📡 @nogoolag 📡 @blackbox_archiv