undefined | Better HN

0 pointsxaedes4y ago0 comments

Do I read that right? 1 in 1000 are false positives? Does that mean 1 in 1000 users can log in as another by chance?

That is no authentication scheme then.

0 comments

Very good question.

Simple answer - No, you won't be able to login as another by chance. You understood it wrong. If 1000 users try to login as you, the results of our statistics show that one of them may be able to do it.

But if you combine typing biometrics with other authentication factors, using it as a two factor authentication (2FA) or as a multi factor authentication (MFA) solution, this scenario won't exist at all.

So yes, typing biometrics is a very strong and efficient authentication method.

xaedesOP4y ago

> If 1000 users try to login as you, the results of our statistics show that one of them may be able to do it.

So each user effectively gets assigned one of ~1000 ids, which is not that different to a three digit decimal PIN, that they then can use as password?

It seems to use it as an authentication scheme a username and 2FA/MFA is _mandatory_. I guess one could then also say: a username is a very strong and efficient authentication method.

raresp4y ago

I like the fact that you are playing with my words.

I didn't said that we have 1000 id's or that we are limited when creating the typing signatures. I said that we have a 99.9% detection accuracy score.

Each signature translates into a unique and encrypted hash with a length of over 300 characters. Compare that with an 8 characters unencrypted password, or with a 64 characters encrypted password and you'll be able to decide for yourself which security is better and more efficient.

Thanks for your interest in Typing AI.

j / k navigate · click thread line to collapse

0 comments

raresp4y ago

Very good question.

So yes, typing biometrics is a very strong and efficient authentication method.

xaedesOP4y ago

> If 1000 users try to login as you, the results of our statistics show that one of them may be able to do it.

So each user effectively gets assigned one of ~1000 ids, which is not that different to a three digit decimal PIN, that they then can use as password?

It seems to use it as an authentication scheme a username and 2FA/MFA is _mandatory_. I guess one could then also say: a username is a very strong and efficient authentication method.

raresp4y ago

I like the fact that you are playing with my words.

I didn't said that we have 1000 id's or that we are limited when creating the typing signatures. I said that we have a 99.9% detection accuracy score.

Thanks for your interest in Typing AI.

j / k navigate · click thread line to collapse