Working on /niche-internet
Building @kiwi 
Podcasting @ web3talks.xyz
Sharing golds @ goldmine3.xyz

So even with open source hardware I still need to trust the individual orb in front of me. How do I know there’s no iris “skimmer” in front of it? I don’t love the idea of an authentication method I can’t reset the password to in case of compromise.

Are we picturing a world in which iris scans are a common method of authentication but never get compromised? Or is world coin hoping to be the only time you ever get your scan done and all other authentications are derived from that single scan? Both scenarios seem improbable to me.

So in general I dig the ambition but prefer social verification a la Proof of Humanity.

On the other hand, after a few drinks you could probably get my scan with a weak promise of OG status.

/max • /bracket • @quickcast • /coys • maxp.co

Something just clicked. The iris scan only serves to prevent duplicate identities, so if your iris scan were to be leaked there still wouldn’t be a way to generate a valid private key for your world coin account. If your key is compromised you can go to an orb, revoke your old credential and initialize a new one?

If another entity compromised your iris scan (let’s say the top secret government lab you work for), is there any mechanism that would allow the World Coin protocol to flag this compromised credential and issue a new one?

It actually is, you only need to verify in-person once. As long as you don’t lose your private key, you never need to return to an Orb.