<![CDATA[Gizmodo: authentication]]> http://tags.gizmodo.com/assets/base/img/thumbs140x140/gizmodo.com.png <![CDATA[Gizmodo: authentication]]> http://gizmodo.com/tag/authentication http://gizmodo.com/tag/authentication <![CDATA[Confirmed: Your iPod Shuffle Earbuds Need Proprietary Chip to Function]]> We followed up on iLounge and BBGadgets' finds this weekend about rumors that the iPod Shuffle has an authentication chip in its headphone controller in order to work with the new control scheme. It does. Updated

iLounge was apparently first mention the presence of a possible authentication scheme, and Boing Boing Gadgets was the first to find some kind of chip inside the headphones—whether or not it was an authentication chip was unknown.

V-Moda, one of the manufacturers who announced shuffle-compatible headphones last week, just confirmed to us that yes, an "authentication chip IS required to enable to volume control functionality with the new shuffle (as well as the latest gen of iPod and MacBooks)." The difference here is that iPods and MacBooks worked with headphones that didn't have the authentication chip. The shuffle does not. Update: This statement was retracted by V-Moda. See bottom of post for details.

V-Moda also says that they've collaborated with Apple for the past few months developing the technology. It seems safe to conclude two things. One, manufacturers who want their headphones to work with the shuffle need to work with Apple in order to get access to the tech inside the authentication chip. Two, only people who Apple "like" are going to get this tech and make compatible headphones—but it's likely that Apple likes almost anybody with the money to pay for licensing.

Whatever the consequences, it does look like Apple is going down the path of locking down headphones, hoping to crunch out another revenue stream from all the manufacturers offering ways of getting sound from your iPod to your ears, whether it be through earbuds or through car adapters.

Image courtesy Boing Boing Gadgets

Update: Another source, plus the original contact at V-Moda, are telling me something different about the chip. V-Moda is retracting their original statement and saying "it is NOT an authentication nor a DRM chip", which I am trying to get clarification on now. The other source says it's supposedly closer to a proprietary control chip that houses the new control scheme, and is an "additional component for the 'made for iPod' program". Again, the phrase "authentication chip" was their language, which they are retracting now. Further updates to come.

Update 2: Joel @ BBG says he spoke to Apple, and they denied the fact that there's any encryption or authentication in the chip. What's also interesting is that another tipster says the chip is relatively easy to clone (a fact Apple strangely corroborates), meaning the reason why the manufacturers are licensing and using Apple's version is most likely to get to market as fast as possible to beat their competitors. And, because they like the fact that they have a made for iPod certification.

Update 3: Spoke to someone else at V-Moda, and they assured me that it was not an authentication chip, but a control chip as part of the "made for iPod" program that they receive from Apple. They've also got no plans to go and duplicate the functionality without the "made for iPod" label, as is probably the case with all other major manufacturers.

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5170797&view=rss&microfeed=true
<![CDATA[World of Warcraft Getting a Hardware Authenticator Tool]]> The hacking and account stealing has gotten so bad on World of Warcraft that Blizzard has decided to release a hardware authenticator to make sure when you log in, you're actually not some dude in China who looks like me. (Unless you are.) The authenticator costs $6.50, and will spit out a six-digit code—much like the Paypal security key—that you enter into your account when you log in. You can use that one authenticator to any number of accounts, so if your whole family plays, you'll only have to pay once. [Blizzard via Wow Insider - Photo of Consumerist's Popken]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5020366&view=rss&microfeed=true
<![CDATA[Internet Explorer 7 Marketshare Lagging, WGA Check Going Away]]> Despite the fact that IE7 ships with every copy of Vista and is a free download for every Windows XP user, the browser only has a marketshare of 20-27 percent. Contrast that with Firefox's 17% share, according to one site, and things are looking dour for Microsoft. So what do they do? No, not improve the browser. They remove the WGA check on the download, which previously required users to have a legit copy of Windows XP before installing. Is this going to dramatically increase usage? We'll see. [Ars Technica]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=307769&view=rss&microfeed=true
<![CDATA[Dynahand Software Complicates Logins Without Adding Security]]> Almost every website you visit these days lets you create an account of some sort to personalize your experience. Remembering all those username/password combos can get tedious and lead to weak, reused passwords that jeopardize your security. Enter Dynahand, a new form of online authentication that requires you to identify your own handwriting from a group instead of typing in a password. But is it worth it? I don't buy it.

The main purpose of the Dynahand system is to alleviate the burden of multiple passwords on your brain, thus simplifying your life. But in order to maintain security, you'll want to set up the system to test you multiple times before each login, a task that no doubt becomes more monotonous than entering a password. Dynahand uses numeric digits and complex handwriting analysis to create your unique written fingerprint, but the developer admits it probably isn't suited for protecting sensitive information like bank accounts.

So is it much ado about nothing? Do you really need to complicate the process for accessing social sites like MySpace and Facebook? Even feasibility is still a concern, as the current method for collecting user handwriting samples is labor-intensive on the provider of the equation. We'll keep an eye out for this approach taking off in the future, but don't buy a ticket just yet.

[Dynahand Handwritten Passwords via Coolest Gadgets]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=274952&view=rss&microfeed=true
<![CDATA[UPEK Eikon Fingerprint Reader Hands-On (It Works With Firefox!)]]> It's been a while since we last found a fingerprint reader we really liked. The previous champion—the lovely Cylon-red Microsoft Fingerprint Reader—was demoted to just Windows login duty (and eventually abandoned altogether) because of its lack of Firefox support. The Eikon? It supports Firefox. That's just one of the reasons why this Upek Digital Privacy Manager USB Fingerprint Reader shines.

In addition to offering flawless Firefox and IE password handling, the reader is simple to use and solid in the way that gasses and liquids are not. Plus, it even works in Vista.

When compared to the most well known fingerprint reader (as judged by Google results and our own anecdotal opinion) by Microsoft, the Upek one comes up the winner in just about every category. It offers a swiping scheme instead of a press-down/mugshot-in-a-police-station scheme. This allows you not to have to clean the sensor with warm water and towel every two weeks like you would for Microsoft's (they actually tell you this in the instructions).

Then, there's the obvious benefits of not having to use Internet Explorer. This alone is a gigantic selling point. But if you do want to use both, say if your bank only supports IE, then the Upek will maintain two sets of passwords for both browsers. Kind of inconvenient to have to enter stuff in twice when setting up the database, but that's a minor gripe.

The reader works just as well for Windows logins under XP and Vista, but there's no Mac support to be found. (Is there even a good one that exists for Macs other than the Sony Puppy?) It even works as an easy way to authenticate and accept the User Account Control notifications in Vista that Apple mocked in one of their ads.

When you finish the setup and actually get around to using it, the reader has a pretty decent recognition rate if you swipe your finger at the optimum speed (or slower). Swipe it too fast and it'll just get confused.

The software is made up of large, easy to read text and icons that you activate by swiping. It's easy to register new pages or "replay your registration," which is their phrase for logging in with your pre-set login and password. Once you get familiar with their sometimes awkward phrasing for saving and entering passwords, you're golden.

In the end we definitely recommend this reader at its dead-presidents-friendly price of $39. You may save $5 by going with Microsoft's solution, but the Firefox support alone is way more to us than $5.

Product Page [Amazon]

Product Page [UPek]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=264945&view=rss&microfeed=true
<![CDATA[Pen-One Fingerprint Pen Steals Your Identity]]> What's the point of a pen that can take your signature when you sign? Imagine your credit card being stolen, but if the person who's signing gets their fingerprint taken when they sign, you'll have a record of who the thief was. A stupid example for sure, but there are other, more important uses for the device. Some that take advantage of its authentication features:

Chain of custody documentation, Child care and custody records, Patient consent and HIPAA compliance, Sarbanes-Oxley signoff for corporate SEC filings, US Customs Entry and Biometric Passport Authentication

Not really a big deal for everyday use, but for high security situations like handing off a Metal Gear, you want to make sure the guy you're giving it to really is who he is, and not just Snake in a mask.

Product Page [Pen-One via Red Ferret via Oh Gizmo]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=221241&view=rss&microfeed=true
<![CDATA[Snappy Face Recognizer For Computer Authentication]]> Because fingerprint readers are so 2003, the Snappy Face Recognizer uses your unique natural handsomeness as a password to log into your computer. The 1.3 megapixel camera snaps a few shots of you to compare to whenever you try and authenticate on your machine.

You could probably use the Face Recognizer as a regular webcam when it's not guarding your PC. Then again, with the right software, you could probably use a regular webcam to do authentication too. That is, if you don't suddenly gain 50 lbs and it can no longer recognize you.

Available for $98.

Snappy Face Recogniser [Widget via Ohgizmo]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=180122&view=rss&microfeed=true
<![CDATA[Jiris Iris Scanner]]> Are fingerprint readers old hat for you now? Try the Jiris JCP1000 from Jiristech, which uses your iris as authentication. Program in your eye—either one is fine, unless you're a pirate—and the Jiris will pick up your eye signature in a second. The included software also encrypts and decrypts your files.

This works fine as a security device until you think of all the times in the movies where someone's eye gets cut out in order to authenticate on a computer/security system.

Product Page

Iris Scan Camera Jiris JCP1000 [i4u]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=174848&view=rss&microfeed=true