{"id":26361,"date":"2021-08-11T01:03:00","date_gmt":"2021-08-11T01:03:00","guid":{"rendered":"https:\/\/www.lifeandnews.com\/articles\/?p=26361"},"modified":"2021-08-12T04:17:20","modified_gmt":"2021-08-12T04:17:20","slug":"paying-with-a-palm-print-were-victims-of-our-own-psychology-in-making-privacy-decisions","status":"publish","type":"post","link":"https:\/\/www.lifeandnews.com\/articles\/paying-with-a-palm-print-were-victims-of-our-own-psychology-in-making-privacy-decisions\/","title":{"rendered":"Paying with a palm print? We\u2019re victims of our own psychology in making privacy decisions"},"content":{"rendered":"\n<p><a href=\"https:\/\/theconversation.com\/profiles\/pam-briggs-1258949\">Pam Briggs<\/a>, <em><a href=\"https:\/\/theconversation.com\/institutions\/northumbria-university-newcastle-821\">Northumbria University, Newcastle<\/a><\/em><\/p>\n\n\n\n<p>The online retail giant Amazon has moved from our screens to our streets, with the introduction of Amazon grocery and book stores. With this expansion came the introduction of Amazon One \u2013 a service that lets customers use their handprint to pay, rather than tapping or swiping a card. According to recent reports, Amazon is now <a href=\"https:\/\/techcrunch.com\/2021\/08\/02\/amazon-credit-palm-biometrics\/\">offering promotional credit<\/a> to users who enroll.<\/p>\n\n\n\n<p>In the UK we\u2019re quickly becoming used to biometric-based identification. Many of us use a thumbprint or facial recognition to access our smartphones, authorise payments or cross international borders.<\/p>\n\n\n\n<p>Using a biometric (part of your body) rather than a credit card (something you own) to make a purchase might offer a lot more convenience for what feels like very little cost. But there are several complex issues involved in giving up your biometric data to another party, which is why we should be wary of companies such as Amazon incentivising us to use biometrics for everyday transactions.<\/p>\n\n\n\n<p>Amazon\u2019s handprint incentive adds to an ongoing academic and policy debate about when and where to use biometrics to \u201cauthenticate\u201d yourself to a system (to prove that you are who you say you are).<\/p>\n\n\n\n<p>On the benefits side, you\u2019re never without your biometric identifier -\u2013 your face, hand or finger travel with you. Biometrics are pretty hard to steal (modern fingerprint systems typically include a <a href=\"https:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?arnumber=8288857&amp;casa_token=4pLXNO5rYzgAAAAA:QAAWsZeISkZffxVgzxvGlkbq95xnXkWA7EOGUrQKduyLd7_X4leii97QIjdYCkmUHdkMH5ZGXA&amp;tag=1\">\u201cliveness\u201d test<\/a> so that no attacker would be tempted to chop a finger off or make latex copies). They\u2019re also easy to use -\u2013 gone are the problems of remembering multiple passwords to access different systems and services.<\/p>\n\n\n\n<p>What about the costs? You don\u2019t have many hands \u2013- and you can\u2019t get a new one \u2013- so one biometric will have to serve as an entry point to multiple systems. That becomes a real problem if a biometric is hacked.<\/p>\n\n\n\n<p>Biometrics can also be discriminatory. Many facial recognition systems fail ethnic minorities (because the systems have been trained with <a href=\"https:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?arnumber=9209125&amp;casa_token=UFqEAflmuV0AAAAA:pgFUQb0n1uvaGctCfNEfZla50Z9JpdfKtE4wziZ_elJtJs4HgVHoxb1L7SgKPgh5yWBTt0dhSg\">predominantly white faces<\/a>. Fingerprint systems may <a href=\"https:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?arnumber=8509614\">fail older adults<\/a>, who have thinner skin and less marked whorls, and all systems would fail those with certain disabilities \u2013 arthritis, for example, could make it difficult to <a href=\"https:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?arnumber=5721811&amp;casa_token=8mm6kbiJvFYAAAAA:XIibuZWoPKxsE41TU2uic6N1e_qK8M-xsFaJujnJsZ0RYgoT9mjTLPMxnYPzYVdjCVD2V_wTvw\">yield a palm print<\/a>.<\/p>\n\n\n\n<h2>Who should we trust?<\/h2>\n\n\n\n<p>A key issue for biometrics \u201cidentity providers\u201d is that they can be trusted. This means that they will keep the data secure and will be \u201cproportional\u201d in their use of biometrics as a means of identification. In other words, they will use biometrics when it is necessary \u2013 say, for security purposes \u2013 but not simply because it seems convenient.<\/p>\n\n\n\n<p>The UK government is currently <a href=\"https:\/\/www.gov.uk\/government\/publications\/uk-digital-identity-attributes-trust-framework-updated-version\">consulting on a new<\/a> digital identity and attributes trust framework where firms can be certified to offer biometric and other forms of identity management services.<\/p>\n\n\n\n<p>As the number of daily digital transactions we make grows, so does the need for simple, seamless authentication, so it is not surprising that Amazon might want to become a major player in this space. Offering to pay for you to use a biometric sign-in is a quick means of getting you to choose Amazon as your trusted identity provider \u2026 but are you sure you want to do that?<\/p>\n\n\n\n<h2>Privacy paradox<\/h2>\n\n\n\n<p>Unfortunately we\u2019re victims of our own psychology in this process. We will often say we value our privacy and want to protect our data, but then, with the promise of a quick reward, we will simply click on that link, accept those cookies, login via Facebook, offer up that fingerprint and buy into that shiny new thing.<\/p>\n\n\n\n<p>Researchers have a name for this: the <a href=\"https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404815001017?casa_token=G49KiKJxhI4AAAAA:LBLbp3PbJ2OhePoYcucU4HamwFvVeOtwXswO6AkZZf91VK_6e01XH99JksNpv9h3bDzA3LMr2Q\">privacy paradox<\/a>. In survey after survey, people will argue that they care deeply about privacy, data protection and digital security, but these attitudes are not supported in their behaviour. Several explanations exist for this, with some researchers arguing that people employ a privacy calculus to assess the costs and benefits of disclosing particular information.<\/p>\n\n\n\n<p>The problem, as always, is that certain types of cognitive or social bias begin to creep into this calculus. We know, for example, that people will underestimate the risks associated with things they like and overestimate the risks associated with things they dislike (something known as the <a href=\"https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0377221705003577?casa_token=YTy8mFBCKVcAAAAA:EumjAvyFQYVRJX7zjUQS-VJzomWVQw9n-e6vADtZHuyUvI2JHNkLEI8IrLmQrO-iIy1WPFTfhQ\">\u201caffect heuristic\u201d<\/a>).<\/p>\n\n\n\n<p>As a consequence, people tend to share more personal data than they should, and the amount of such data in circulation grows exponentially. The same is true for biometrics. People will say that only trusted organisations should hold biometric data, but then go on to give their biometrics up with a small incentive. In <a href=\"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2778972?casa_token=wtG1zO9QeAQAAAAA:htr-861bqneZm40HDDSo8ezNGQc3xqGRC6-RDH8MEiDFajPCYSM3ba7NRS5uuzKzQU0hMfNNJwFg\">my own research<\/a>, I\u2019ve linked this behavioural paradox to the fact that security and privacy are things we need to do, but they don\u2019t give us any joy, so our motivation to act is low.<\/p>\n\n\n\n<p>Any warnings about the longer-term risks of taking the Amazon shilling might be futile, but I leave you with this: your biometrics don\u2019t just confirm your identity, they are more revealing than that. They say something very clearly about ethnicity and age, but may also unknowingly reveal information about disability or even mood (in the example of, say, a voice biometric).<\/p>\n\n\n\n<p>Biometric analysis can be done without permission (state regulations permitting) and, in some cases, <a href=\"https:\/\/www.jtl.columbia.edu\/bulletin-blog\/a-face-in-the-crowd-facial-recognition-technology-and-the-value-of-anonymity\">at scale<\/a>. China leads the way in the use of face recognition to identify individuals in a crowd, <a href=\"https:\/\/www.reuters.com\/article\/us-health-coronavirus-facial-recognition-idUSKBN20W0WL\">even when wearing masks<\/a>. Exchanging a palm print for the equivalent of a free book may seem like a vastly different thing, but it is the thin end of the biometric wedge.<\/p>\n\n\n\n<p><a href=\"https:\/\/theconversation.com\/profiles\/pam-briggs-1258949\">Pam Briggs<\/a>, Research Chair in Applied Psychology, <em><a href=\"https:\/\/theconversation.com\/institutions\/northumbria-university-newcastle-821\">Northumbria University, Newcastle<\/a><\/em><\/p>\n\n\n\n<p>This article is republished from <a href=\"https:\/\/theconversation.com\">The Conversation<\/a> under a Creative Commons license. Read the <a href=\"https:\/\/theconversation.com\/paying-with-a-palm-print-were-victims-of-our-own-psychology-in-making-privacy-decisions-165861\">original article<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pam Briggs, Northumbria University, Newcastle The online retail giant Amazon has moved from our screens to our streets, with the introduction of Amazon grocery and book stores. With this expansion came the introduction of Amazon One \u2013 a service that lets customers use their handprint to pay, rather than tapping or swiping a card. According [&hellip;]<\/p>\n","protected":false},"author":44,"featured_media":26362,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5,277],"tags":[650,3793,527,1699,525],"_links":{"self":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/26361"}],"collection":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/comments?post=26361"}],"version-history":[{"count":1,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/26361\/revisions"}],"predecessor-version":[{"id":26363,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/26361\/revisions\/26363"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media\/26362"}],"wp:attachment":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media?parent=26361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/categories?post=26361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/tags?post=26361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}