Amazon One is DANGEROUS
I so wanted to scan my palm to pay at Whole Foods, but I would never want to give a high-definition image of my palm to anyone. If all Amazon One did was extract a hash from the image on-device, and never save the image, then I would consider the system secure.
It’s fine for Amazon to store the hash (“palm signature”) centrally - they can never use it to impersonate me, only to authenticate me. BUT, storing the image, even in a secure environment, opens the possibility that a nefarious actor impersonates me. There is no 100% security.
So before I signed up, I researched whether Amazon stored my palm image… and to my horror, they do.
When you scan your palm, the palm and vein images are immediately encrypted and sent to a highly secure zone in the AWS Cloud, custom-built for Amazon One, where your unique palm signature is created. Access to this area of the cloud is highly restricted...
