Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Rwanda Pilots Biometric SIM Card Registration
Rwanda has initiated a pilot program for biometric SIM card registration, using fingerprint and facial recognition technology to enhance security and ensure data accuracy. The system, overseen by the Rwanda Utilities Regulatory Authority (RURA), links SIM card registration with the National Identification Agency (NIDA) to prevent fraud and safeguard personal data. Applicants must provide identity documents and undergo biometric verification, with accommodations for individuals with disabilities. The program also includes foreign residents, such as immigrants and asylum seekers, who must verify their identities with valid documents.
Hacking Tool Can Track Apple Headset Eye Movements to Guess Passwords
A new cybersecurity threat called GAZEploit is targeting Apple Vision Pro’s eye-tracking technology, allowing hackers to infer users’ keystrokes in virtual reality (VR) environments by analyzing their eye movements. Developed by researchers from the University of Florida, CertiK Skyfall Team, and Texas Tech University, GAZEploit uses machine learning to predict keystrokes with up to 86 percent accuracy for individual keys and 98 percent for detecting typing sessions. This vulnerability enables attackers to steal sensitive data, such as passwords, by remotely analyzing video footage of users’ avatars in virtual environments.
Security Camera Maker Reaches $2.95M Settlement with FTC
Security camera manufacturer Verkada has agreed to pay a $2.95 million civil penalty to settle allegations by the Federal Trade Commission (FTC) over inadequate security measures and deceptive marketing practices. The FTC investigation stemmed from two data breaches, one in December 2020, in which malware infiltrated Verkada’s system undetected for weeks, and another in March 2021, in which hackers accessed live camera feeds and sensitive data from 115,000 customers. The breaches exposed footage of hospital patients, schoolchildren, and prisoners. Verkada was found in violation of laws, including HIPAA and the FTC Act, and falsely claimed to be “HIPAA certified.” As part of the settlement, the company must improve its security protocols, including implementing multi-factor authentication and submitting annual security compliance reports to the FTC for twenty years.
Republicans File Legal Challenge Against Student Digital ID Use in Election
Republican organizations have filed a lawsuit against the North Carolina State Board of Elections (NCSBE) to prevent students and employees at the University of North Carolina at Chapel Hill from using digital IDs, such as the “Mobile UNC One Card,” for voting. The lawsuit, brought by the Republican National Committee and the North Carolina Republican Party, argues that state law allows only physical IDs for voting. The NCSBE had approved the use of the digital ID in a 3-2 vote, citing that it meets all legal requirements. The legal challenge raises concerns over potential voter fraud and logistical issues, while opponents argue that the lawsuit could disenfranchise many voters relying on digital IDs.
Prism Project Maps Out Travel and Tourism Opportunity in Latest Report
The Prism Project has launched its latest report, the Biometric Digital Identity Travel and Hospitality Report, building on its previous Financial Services Prism Report. Produced by Acuity Market Intelligence, the new report focuses on the travel and tourism sector, highlighting the potential for significant growth in biometric and digital identity technologies. Featured organizations include SITA, Indicio, and Wicket, which was recognized for its innovations in facial recognition for seamless stadium access. Maxine Most, Acuity’s Principal Analyst, unveiled the report at Identity Week America in Washington, D.C., with a government services-focused report expected in October.
Sahel Nations Announce Biometric Passport Plans
Mali, Burkina Faso, and Niger have announced plans to introduce new biometric passports under the Alliance of Sahel States (AES), marking a shift away from their previous association with the Economic Community of West African States (ECOWAS). The AES passports aim to harmonize travel documents and ease international mobility for citizens of the three nations. The move follows military coups in these countries, leading to their withdrawal from ECOWAS despite efforts to retain them. ECOWAS is concerned this could weaken regional unity, especially as it works to implement a shared biometric ID system to facilitate free movement within its 15-member bloc.
—
September 16, 2024 — by Tony Bitzionis and Alex Perala
Follow Us