AI Voice Scam – Source: www.schneier.com

Clive Robinson •

May 1, 2024 8:28 AM

@ Bruce, ALL,

In a world that is moving rapidly to a “man in the middle” paradigm where “Face to Face”(F2F) nolonger happens

Two important points,

1, How do we prove we are who we say we are?


2, How do you verify someone is who they say they are?

As far as I’m aware there is no easy or even realistically workable solution to this.

In the past the likes of the head of MI5 Stella Rimington pointed out it was actually not possible. And many “National ID Card” systems have failed because those involved did not take it onboard.

But more than a quarter of a century ago I fell foul of a couple of simple things,

“Authenticating the channel is not authenticating the transaction”.

“Anything an individual can do another individual or system can impersonate.”

Reading Ross Anderson’s comments on the difference in “trust” should be mandatory reading.