Pages:
Author

Topic: Brain wallet password based on fingerprint? (Read 2583 times)

tyz
legendary
Activity: 3360
Merit: 1533
August 26, 2016, 11:26:39 AM
#57
Like let's say you get a fingerprint based password for your brain wallet seed pass phrase. And you someday have an accident, like you burn your hand while cooking or some shit.

If you argument this way, then there is absolutely no secure way. Of course, there is no 100% secure way at all. You can also store your brain wallet password on a stick or print it on a paper, nonetheless, the stick could get damage or the paper wallet could get burned or get accidently lost.
legendary
Activity: 1358
Merit: 1014
I don't think this is a good idea to be honest. All those iris, fingertip, voice... all those biometric type of security solutions aren't real solutions to me.

Like let's say you get a fingerprint based password for your brain wallet seed pass phrase. And you someday have an accident, like you burn your hand while cooking or some shit. This would result in a fingertip that is no longer what is stored to decipher the password. And now you are stuck with a wallet that cannot be recovered and 6 months of rehabilitation to heal your finger.
legendary
Activity: 2674
Merit: 2970
Terminated.
Brain wallets are good because they are unpredictable, you don't know what the person that made the password was thinking
Nonsense. Human thinking is predictable, their password habits are usually weak/horrible and the adjective simplistic can be used for the majority as well.

Brain wallets can be easily bruteforced.
Indeed.

Humans are really bad at being truly random.
I concur. They're also very bad at probabilities, hence why we get people from time to time worrying about address collision.

Some people are developing fingerprint wallets for online bank accounts and offline shopping.
Replacing passwords with fingerprints is not safer.

Good for paranoids, i can't understand why people is always scared about hackers in 2016, when almost everywhere you can avoid them or just block you wallet?
Stating this, after we've experienced one of the largest 'hacks' (it's debatable what exactly happened, but let's ignore that since discussing it would be off-topic) in the history of Bitcoin, is very ignorant and ridiculous.
sr. member
Activity: 406
Merit: 250
Good for paranoids, i can't understand why people is always scared about hackers in 2016, when almost everywhere you can avoid them or just block you wallet?
hero member
Activity: 3178
Merit: 937
I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

This isn`t very inovative.

Some people are developing fingerprint wallets for online bank accounts and offline shopping.

This will replace debit and credit cards.

This is the future,i guess.
newbie
Activity: 54
Merit: 0
Brain wallets are good because they are unpredictable, you don't know what the person that made the password was thinking, opposite to prints, although they are unique they are so easy to get that it would make awful security. you literally leave your password everywhere you touch.
legendary
Activity: 2674
Merit: 2970
Terminated.
i'm not sure on this one, but i have read that there are people with the same fingerprint. this is rare but still not cool.
AFAIK these cases are very rare, even twins don't have identical fingerprints. The chances of you meeting somebody with the exact set of fingerprints are ridiculously low.

FINGERPRINTS ARE NOT PASSWORDS. FINGERPRINTS ARE USERNAMES.
Seems like most of the signature spam is just ignoring this, or doesn't understand it at all. I doubt that they've even read your post in the first place.

I never said this is the only factor that gives security. A large address space is necessary, but not sufficient, for bitcoin security.
Fair point. I was just under that impression after reading the statement. Sorry for the missunderstanding.
hero member
Activity: 756
Merit: 501
i'm not sure on this one, but i have read that there are people with the same fingerprint. this is rare but still not cool. but as i mentioned i'm not sure and i might only be the software that thinks they are the same. this was some years ago so it might have changed.

Banks already use that technology and the result is people are loosing their fingers, soo i dont like it, several people complaint cant acess their accounts because machine didnt read well the fingers, bitcoin doesnt need such, there is already enought security around bitcoin wallets.
hero member
Activity: 518
Merit: 500
I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.
it's a good idea but whether it can work well and something that is impossible to use the fingerprints as security of bitcoin wallet, in fact this way will be a little tricky.
member
Activity: 82
Merit: 10
i'm not sure on this one, but i have read that there are people with the same fingerprint. this is rare but still not cool. but as i mentioned i'm not sure and i might only be the software that thinks they are the same. this was some years ago so it might have changed.
hero member
Activity: 910
Merit: 502
if people are adament they want fingerprint technology to be used, atleast make it workable
afterall, people have 10 fingers

i would suggest a method that has 10 keys(one per finger). but only needs lets say 3 keys to move funds.(3 of 10 multisig)
that way any of your 3 fingers would be accepted.

but just a 1 finger one key is not a good way to secure funds especially due to chemical burns, papercuts, age and other things that can affect a fingerprint
That's actually feasible and a lot better than just having one finger print as a key.
My index finger has actually changed it's print since the I accidentally cut the surface of it with a cutter when I was cutting potatoes. It now has these little broken lines that used to be a line before, and some parts have random prints on them.
hero member
Activity: 1106
Merit: 521
these forms of identification are not always 100 per cent accurate.  some times they give false positives
hero member
Activity: 1190
Merit: 534
I am not sure this is great idea or not but since I’m from India and we have unique resident identification system that means government have our data not only regarding financial or social aspects but also our photographs, records and even fingerprints, eyeball photographs etc. That is critical case if we implement any such credential unlocking system.

I strongly believe not our data is not safe not only talking about Indian government but also any government of any corner of the world.
newbie
Activity: 54
Merit: 0
But still, since you leave your prints in tons of locations everyday, You can't really say a fingerprint is a good password since you put it on everything you touch, Unlike a password or a number which can be pretty unique and unpredictable.
hero member
Activity: 1470
Merit: 655
I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

Even if the wallet password is based on the fingerprint there should be always an alternative to unlock it like the phones.
Sometimes you can't put your fingerprint and you enter a password and unlock it(like the laptop,phone etc), which is still not 100% secure.

i think as others has mentioned before in the first two pages using fingerprint for your password as a kind of brain wallet is far from secure. and i think it is only more like a cool idea rather than a practical and secure one.
just like brain wallet itself, you can still make a private key using a sentence or a simple 123 password using brain wallet code but that never was secure and i think this one is not either.
legendary
Activity: 1204
Merit: 1000
I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

Even if the wallet password is based on the fingerprint there should be always an alternative to unlock it like the phones.
Sometimes you can't put your fingerprint and you enter a password and unlock it(like the laptop,phone etc), which is still not 100% secure.
legendary
Activity: 1382
Merit: 1122
firstly
smart phones get handled.
so if you steal a smart phone then with a bit of dustpowder and some tape you can literally get the fingerprint from the screen of the same device you want to raid.

secondly
finger prints are not exact.
there are hundreds of 'indicators' on a finger, but get a papercut a few of them change/disapear, get old or fat and it changes. get calluses from hard labour work, a few of them change/disapear. use chemicals as a janitor on your hands in an accident, a few of them change/disapear
this is why the threshold for 'comparison' in criminal evidence is so low at a 6-12 indicator points because getting ALL indicators will never be possible.
meaning you cannot rely on hand picking just 6-12 indicators last year, hoping they will still be there in a few years. criminal finger print comparison looks at MANY indicators (above threshold) from an old sample and hope to find just 6-12 indicators on a newer sample

thirdly
retina scans are not perfect either.. diabetes, catacts, blindness, and other conditions can 'blur' the image obtained from a retina scan..

fourthly
identifyers in your head (password) is much safer than identifyers on your finger. imagine it this way. having fingerprint ID is like shouting out your email password every time you touch a light switch, cutlery, a bottle, even the tv remote.

in short trying to solve a security issue by making is stupidly easy for others to get hold of with some tools, or worse case eventually lose you access to due to nature purely based on laziness of someone clicking a few buttons and thinking about safe storage(using their brain).. is ultimately not a solution to security

it made the title laughable.. brain wallet without the brain....
you may like my next pun..

ill give this idea my middle finger



You have a lot of excellent points there. I have a scar on one of my fingers and often wondered if my fingerprint would be different now. Also, with your eyes deteriorating over years it could change the scan.

Clearly what we need is a private key somehow based on your DNA then we're all set!
legendary
Activity: 2674
Merit: 2970
Terminated.
Correct, it's the S5 that still had in on screen.
They did change that, however I don't find fingerprint safe especially not singular ones. Maybe if there was a specific combination of fingerprints used, it could result in a decent password (e.g. a specific order of several fingers only works).

This is something I'm really curious about... What about retina/iris, would it increase the set of possible keys?
It would likely not do that.

The security of bitcoin comes from its enormous address space, when you reduce this space you reduce the security. This is why human generated brainwallets are stupid and are often sweeped in seconds.
One could argue that this isn't the only factor that gives it security. You're forgetting proof-of-work, While not on-topic, your statement does seem a bit incorrect to me. I do agree with your statement regarding the brainwallet. I really don't see the need for someone to use one, especially not one based on fingerprints/IRIS. An offline wallet with encryption is always the better alternative. How hard could it be to memorize a semi-complex string of ~20 characters?

If smart glasses like Google glass will be mainstream in some years, everyone will be able to easily get an iris scan. However a scan of three or more fingers of yours is rather impossible. Just my opinion.
All of your fingerprints are pretty much everywhere, especially in the place where you live. That's not a good argument.
legendary
Activity: 4424
Merit: 4794
if people are adament they want fingerprint technology to be used, atleast make it workable
afterall, people have 10 fingers

i would suggest a method that has 10 keys(one per finger). but only needs lets say 3 keys to move funds.(3 of 10 multisig)
that way any of your 3 fingers would be accepted.

but just a 1 finger one key is not a good way to secure funds especially due to chemical burns, papercuts, age and other things that can affect a fingerprint
tyz
legendary
Activity: 3360
Merit: 1533
Generally, I think a iris scanner would be a better option.

I am not really sure if an iris scanner is more secure than creating a passphrase out of several fingerprints. If smart glasses like Google glass will be mainstream in some years, everyone will be able to easily get an iris scan. However a scan of three or more fingers of yours is rather impossible. Just my opinion.
Pages:
Jump to: