1 day ago

What Digital Identity Professionals are Expected to be Familiar with

We have no such inordinate expectation that all the identity professionals should be aware of the power and merit of making use of citizens’ episodic memory for building a solid identity assurance platform. However, we expect the people who are viewed as identity professionals to be familiar with, at least, these basic points taken up in “What We Know for Certain about Authentication Factors” https://www.linkedin.com/pulse/what-we-know-certain-authentication-factors-hitoshi-kokumai

Digital Identity

1 min read

What Digital Identity Professionals are Expected to be Familiar with

However, we expect the people who are viewed as identity professionals to be familiar with, at least, these basic points taken up in “What We Know for Certain about Authentication Factors” https://www.linkedin.com/pulse/what-we-know-certain-authentication-factors-hitoshi-kokumai

It’s not an excessive expectation of the professionals, is it?

Fore more, refer to this collection of digital identity comments — https://www.linkedin.com/pulse/collection-digital-identity-comments-hitoshi-kokumai-posted-kokumai/

2 days ago

MFA: Multi-Layer or Multi-Entrance?

Start using Modern Auth now for Exchange Online https://www.theregister.com/2022/06/29/cisa-microsoft-modern-auth/ It is good to see the merit of MFA emphasized. Not seeing it emphasized that MFA must mean ‘Multi-Layer/in-series’, not ‘Multi-Entrance/in-parallel’ is not good in view of the present awkward situation that not a few security people have been, whether knowingly or unknowingly, mixing them up and have thus spread a false sense of security.

Authentication

1 min read

MFA: Multi-Layer or Multi-Entrance?

Start using Modern Auth now for Exchange Online

https://www.theregister.com/2022/06/29/cisa-microsoft-modern-auth/

It is good to see the merit of MFA emphasized. Not seeing it emphasized that MFA must mean ‘Multi-Layer/in-series’, not ‘Multi-Entrance/in-parallel’ is not good in view of the present awkward situation that not a few security people have been, whether knowingly or unknowingly, mixing them up and have thus spread a false sense of security.

We wish that the authorities will make it clear and transparent.

Ref: “What We Know for Certain about Authentication Factors” https://www.linkedin.com/pulse/what-we-know-certain-authentication-factors-hitoshi-kokumai/

2 days ago

Get ‘Authentication’ Covered as well as ‘Identification’

New biometric laws needed urgently, review finds Ryder Review calls for a new statutory framework to follow before biometric technology can be deployed against members of the public https://www.thinkdigitalpartners.com/news/2022/06/29/new-biometric-laws-needed-urgently-review-finds/ Should it now cover only the issues of biometrics for ‘individual identification’, the scope could hopefully be expanded to cover ‘identity authentication’ as well.

Biometrics

1 min read

Get ‘Authentication’ Covered as well as ‘Identification’

New biometric laws needed urgently, review finds

Ryder Review calls for a new statutory framework to follow before biometric technology can be deployed against members of the public https://www.thinkdigitalpartners.com/news/2022/06/29/new-biometric-laws-needed-urgently-review-finds/

Should it now cover only the issues of biometrics for ‘individual identification’, the scope could hopefully be expanded to cover ‘identity authentication’ as well.

The two major issues to be examined are the lack of transparency with respect to:

1. empirical false acceptance rates and corresponding false rejection rates measured in the actual use environments, both indoor and outdoor,

2. security effects of biometrics deployed with a default/fallback password.

Ref: “Biometrics Unravelled | password-dependent password-killer” https://www.linkedin.com/pulse/biometrics-unravelled-password-dependent-hitoshi-kokumai/

3 days ago

Do Keep Password Login

National Guardsmen may soon use personal electronics in deployments https://www.c4isrnet.com/smr/5g/2022/06/28/national-guardsmen-may-soon-use-personal-electronics-in-deployments/ I would like to believe that they are not so reckless as to listen, however loud it may be, to the voices of urging removal or skip of the password from login process What would happen should they listen? — devastation! These discussions might hopefully encourage them to think twice in order to not see a disaster — “LOSS of Security Taken for GAIN of Security” https://www.linkedin.com/pulse/loss-security-taken-gain-hitoshi-kokumai/

Cybersecurity

1 min read

Do Keep Password Login

National Guardsmen may soon use personal electronics in deployments

https://www.c4isrnet.com/smr/5g/2022/06/28/national-guardsmen-may-soon-use-personal-electronics-in-deployments/

I would like to believe that they are not so reckless as to listen, however loud it may be, to the voices of urging removal or skip of the password from login process

What would happen should they listen? — devastation!

These discussions might hopefully encourage them to think twice in order to not see a disaster — “LOSS of Security Taken for GAIN of Security” https://www.linkedin.com/pulse/loss-security-taken-gain-hitoshi-kokumai/

6 days ago

Conceivable Narratives of ‘Passwordless’ Authentication Promoters and Supporters

We could accept “Passwordless” authentication if it comes with a transparent statement that it brings ‘better availability’ at the cost of losing security, helping people where availability and convenience, not security, matters most. The problem is that the “passwordless” promoters are adamantly alleging that the passwordless scheme increases the security…

Cybersecurity

2 min read

Conceivable Narratives of ‘Passwordless’ Authentication Promoters and Supporters

Jun 28

Warm Login Interface for Cold Digital Computing

Does ‘Digital Computing’ sound warm-hearted to us? — Probably NO for most of us. Do we feel cold-hearted when we watch the pictures of our pets taken when they were puppies and kittens? — Probably NO for most of us. What if you pick up such heart-warming pictures as your…

2 min read

Jun 27

Dissecting Silence of Digital Identity Professionals

“We can accept “passwordless” and “biometrics” authentication schemes without losing sanity where the public are all accurately informed that the merit of “passwordless” and “biometrics” authentication is better availability obtained at the cost of largely losing security.” The above is a briefest summary of our understanding on “passwordless” and “biometrics”…

Digital Identity

2 min read

Jun 24

Deep Fake Makes it Easier to Skip Your Volition and Memory

Today’s topic — Austria to combat deep fakes amid increasing use of the technology https://www.euractiv.com/section/disinformation/news/austria-to-combat-deep-fakes-amid-increasing-use-of-the-technology/ An alarmingly large number of people seem to be misled to believe that a default password should prevent a bad guy, who has somehow compromised their biometrics, from taking over their accounts. They may well take it for granted that their default password must work as an additional protection…

Artificial Intelligence

2 min read

Deep Fake Makes it Easier to Skip Your Volition and Memory

Jun 22

Let “Passwordless” authentication prevail as a security-enhancing scheme

and we would find it very hard for many of us to remain sane; what we hear would be “Removal of the army contributes to national defense” “What has to depend on a password kills the password” “PIN (numbers-only weak password) is not the password” “A default/fallback password is not…

Passwords

2 min read

Let “Passwordless” authentication prevail as a security-enhancing scheme

Jun 20

From Text-only Password to Expanded Password

Power of Citizens’ Episodic Memory https://www.linkedin.com/pulse/power-citizens-episodic-memory-hitoshi-kokumai/ Collected here are our digital identity posts since 24/February/2022 on the power and merit of citizens’ episodic memory, which is the least volatile of human memories, as the best source of secret credential for solid identity assurance. Making use of episodic memory for identity authentication is not a hypothesis but has long been deployed by one of the most demanding users — ground soldiers.

Digital Identity

1 min read

From Text-only Password to Expanded Password

Power of Citizens’ Episodic Memory

https://www.linkedin.com/pulse/power-citizens-episodic-memory-hitoshi-kokumai/

Collected here are our digital identity posts since 24/February/2022 on the power and merit of citizens’ episodic memory, which is the least volatile of human memories, as the best source of secret credential for solid identity assurance.

Making use of episodic memory for identity authentication is not a hypothesis but has long been deployed by one of the most demanding users — ground soldiers.