What is the central problem of AI? Most likely, it's that it'll doom us to being ruled by belligerent fools.
A gun lets a someone impose coercive force with significantly reduced personal risk. A drone even more so. The further removed the person is from personal risk, the more likely a coward is to occupy a position usually reserved for the brave.
It is well-established that the most assertive person in a group, even when said person is stupid and wrong, is more likely to influence or even lead the group.
AI will do for fools what guns did for weaklings and cowards: it will give them access to domains that they were normally excluded from due to their lack of the requisite virtue.
And so now, the most assertive and belligerent of fools, armed with AI, will have far greater access to the domains of authority than at any time in history.
Hacking the #EU#AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.