Trust, but Verify: home

Room 01 · identity and passwords

Room 01. Who are you?

Кто ты?

People tried to prove who they were long before passwords. There were always three ways: something you know, something you have, something you are.

Pairs in this room

  1. 01/01 Signature ↔ signature

    Jan van Eyck, 1434

    Van Eyck signed his painting and left witnesses in the mirror. A digital signature is made with a private key and witnessed by a certificate authority. Check who signed an app before installing it.

  2. 01/02 Mask ↔ biometrics

    Adam Harvey; Zach Blas, 2010; 2011–2014

    Artists invented make-up and masks that hide a face from cameras. A face is a poor password: everyone sees it and it cannot be changed. Add a second factor to face unlock.

  3. 01/03 Book ↔ leak

    Aram Bartholl, 2013

    Bartholl printed a book of leaked passwords. Ours is built from the public RockYou list, the first thing any attacker tries. Look for your password. Found it? Change it today.

  4. 01/04 Diary ↔ footprint

    Hasan Elahi, since 2003

    Elahi publishes his every move so surveillance has nothing to find. Your phone does the same without asking. Revoke location access from apps that do not need it.

Check 1 of 4

Find today's password in the password book (it is on the sign next to it). Write the page number.

A popular password is a public password.

The verification passport

Interactives

The password book

  1. Open the volume at the first letter of the password.
  2. Find the password of the day from the sign.
  3. Write the page number in your passport and take stamp 1.

How long your password lives

  1. Type a password similar to yours. Not your real one.
  2. See how fast it would be cracked.
  3. The screen clears itself after 20 seconds. Nothing is stored.

Opening talk

Why a face is a bad password: authentication from the signet ring to passkeys

How many seconds a password from the audience survives

Room 01 curator: [КУРАТОР ЗАЛА 01]