Courtesy of Badge Inc.The legendary technologist known as “Darpa Dan” has joined an obscure cybersecurity startup with an ambitious goal: A biometric security product that functions without storing users’ credentials anywhere. Dan Kaufman, whose career has spanned Dreamworks, Google, and a 10-year tour at the Defense Advanced Research Projects Administration, told Semafor he believes the new project may be his most consequential endeavor yet, with the potential to render a huge category of malicious hacks useless while making life easier for consumers. “The world is catching on that the old way of doing things is a terrible way of doing things,” he told Semafor. The company, Badge Inc., was founded in 2019 by Dr. Tina P. Srivastava, a former NASA rocket scientist and head of electronic warfare programs for Raytheon. Her thesis was that the cybersecurity paradigm is fundamentally broken because of one, fatal flaw: Security credentials need to be stored somewhere, but nowhere is safe from hackers. Srivastava figured out a way to authenticate internet users without the need to store security credentials at all with a new method of encryption that uses a concept often called “fuzzy logic,” which enables biometric data like fingerprints and face scans to be used for authentication without exposing any sensitive information. It also means that biometric authentication can be used from anywhere, not just a phone or a specific piece of hardware. “We need to live in a world where you’re not tied to a device anymore. It works on anything,” Srivastava said. She set out to create the method after her information was stolen by Chinese hackers in 2015 in a data breach that targeted the Office of Personnel Management. The breach exposed 22.1 million records, including government employees and others who had been subject to background checks. Srivastava says that hack and others like it shouldn’t even be possible, because storing sensitive information is unnecessary with the new method of encryption that Badge employs. |