Hitoshi Kokumai

2 years ago · 2 min. reading time · ~100 ·

Blogging
>
Hitoshi blog
>
Password Should Stay and Should be Removed?

Password Should Stay and Should be Removed?

 

I would like to take up this somewhat puzzling report - “Google advises passwords are good, spear phishing is bad, and free clouds get attacked” https://www.theregister.com/2021/11/25/google_cybersecurity_action_team_threat_horizons/

It reads “Google advises passwords are good, spear phishing is bad, and free clouds get attacked” and “Crims got in because, in 48 per cent of cases, operators didn't have a password, had a weak password, or didn't bother authenticating APIs.”   

How come such a remark could be uttered by the people who have been touting the ‘password-less authentication’?   

Anyway, the consequence of removing the password from identity security is made clear in this post – “Remove the army and we will have a stronger national defense” 

 

Key References 

Biometrics is to Password what Back door is to Front door

Removal of Passwords and Its Security Effect 

Negative Security Effect of Biometrics Deployed in Cyberspace

External Body Features Viewed as ‘What We Are’

Distracted “A - Distracted “A - Distracted “A - Distracted “A


Additional References
 

For Achieving Solid Digital Identity on Information Security Buzz (Mar/2021)

What We Know for Certain about Authentication Factors

Digital Identity for Global Citizens
 Image-to-Code Conversion by Expanded Password System

Summary and Brief History - Expanded Password System

Proposition on How to Build Sustainable Digital Identity Platform

Account Recovery with Expanded Password System 

 History, Current Status and Future Scenarios of Expanded Password System 

Availability-First Approach 

Update: Questions and Answers - Expanded Password System and Related Issues 

 < Videos on YouTube>
 

Slide: Outline of Expanded Password System (3minutes 2seconds)

Digital Identity for Global Citizens (10minutes - narrated)

Demo: Simplified Operation on Smartphone for consumers (1m41s)

Demo: High-Security Operation on PC for managers (4m28s)

Demo: Simple capture and registration of pictures by users (1m26s)

Slide: Biometrics in Cyber Space - "below-one" factor authentication


 

Comments

Zacharias 🐝 Voulgaris

2 years ago #1

Google never did and definitely hasn't changed its ways now about privacy and cybersecurity. I wouldn't believe anything it says about this topic. Also, it has vested interests when it comes to the cloud. In my experience, free cloud providers are as safe as paid ones. Here's an idea: learn about this topic more instead of trusting what Google and other self-proclaimed experts say about it.

Articles from Hitoshi Kokumai

View blog
2 years ago · 2 min. reading time

Bad guys, who have a quantum computer at hand, would still have to break the part of user authentica ...

2 years ago · 2 min. reading time

Another topic for today is “Passwordless made simple with user empowerment” · https://www.securitym ...

2 years ago · 2 min. reading time

“Expanded Password System is no bad, but we do not need it. · We can rely on password managers that ...

Related professionals

You may be interested in these jobs

  • Chartwells

    Pub Kitchen Chef Needed

    Found in: Jooble UK O C2 - 6 days ago


    Chartwells Winchester, Hampshire, United Kingdom

    We're currently recruiting an ambitious Chef to help us create exceptional food experiences for Chartwells on a full time basis contracted to 40 hours per week. As a Chef, you will be responsible for preparing and serving the kind of food that truly brightens our clients' and cus ...

  • beBee Professionals

    Quality Analyst

    Found in: beBee Professionals UK - 2 days ago

    Direct apply

    beBee Professionals Wales, United Kingdom Full time

    Responsibilities: · - Perform quality inspections and audits to ensure products meet specified quality standards and regulatory requirements. · - Analyze production processes and identify opportunities for improvement to enhance product quality and efficiency. · - Develop and imp ...

  • First Recruitment Group

    Communications Executive

    Found in: Jooble UK O C2 - 4 days ago


    First Recruitment Group London, United Kingdom

    Job opportunity for a Communications Manager · Role - Communications Manager (Level 5) · Initial 6 month contract · Location - Flexible (Hybrid working) · Our Client has a requirement for a Communications Manager (Level 5), who will be required to work on a 6 month contract basis ...