EFF: The Devil Is in The Details Of Project Verify’s Goal To Eliminate Passwords
The Devil Is in The Details Of Project Verify’s Goal To Eliminate Passwords A coalition of the four largest U.S. wireless providers calling itself the Mobile Authentication Taskforce recently announced an initiative named Project Verify . This project would let users log in to apps and websites with their phone instead of a password, or serve as an alternative to multi-factor authentication methods such as SMS or hardware tokens. Any work to find a more secure and user-friendly solution than passwords is worthwhile. However, the devil is always in the details—and this project is the work of many devils we already know well. The companies behind this initiative are the same ones responsible for the infrastructure behind security failures like SIM-swapping attacks , neutrality failures like unadvertised throttling, and privacy failures like supercookies and NSA surveillance. Research on moving user-friendly security and authentication forward must be open and v...