Oracle announced a major shift in its cybersecurity approach at Oracle CloudWorld 2024 in Las Vegas. Larry Ellison, Oracle’s CTO, declared that the company’s employees will no longer use passwords by next year. Instead, they will switch to biometric security measures like facial recognition, thumbprint recognition, or voice authentication.
Ellison criticized the current reliance on passwords, calling them “insecure and easy to steal.” He pointed out that complex passwords with special characters are often forgotten or stolen. “The idea that we use passwords is a ridiculous idea. It’s obsolete.
It’s very dangerous,” he said. Under Oracle’s new plan, biometric logins will replace traditional passwords. Ellison believes these methods are more secure and user-friendly.
“Biometric logins are much easier to use – and much faster and much more secure,” he said.
Biometric authentication at Oracle CloudWorld
He also mentioned potential broader applications for biometric technology, such as securing credit cards and controlling access to schools.
However, biometric technology is not without its challenges. There are concerns about the harvesting of personal data and the risks of data breaches. In 2020, hackers accessed the client list of Clearview AI, a facial recognition technology provider.
There are also questions about the accuracy and reliability of such systems. In 2018, Big Brother Watch reported a 98% failure rate in facial recognition used by UK police. The rise of deepfake technology further complicates the landscape.
Cyber criminals are increasingly using generative AI to create fake video and audio files. Earlier this year, a finance worker in Hong Kong was tricked into paying $25 million after cyber criminals used deepfake technology to impersonate the company’s CFO during a conference call. While biometric technology offers promising advancements in cybersecurity, companies must carefully consider the risks and take steps to protect personal data.
Oracle’s move away from passwords could set a significant precedent in the industry, emphasizing the need for more secure and effective authentication methods.
