Disclaimer: Information found on CryptoreNews is those of writers quoted. It does not represent the opinions of CryptoreNews on whether to sell, buy or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk.
CryptoreNews covers fintech, blockchain and Bitcoin bringing you the latest crypto news and analyses on the future of money.
Cybersecurity company Trail of Bits has finalized the audit of Worldcoin’s ORB technology, determining that it complies with strict privacy standards, especially regarding the processing and storage of personally identifiable information (PII).
The comprehensive report was published on March 13 and indicated that there are no weaknesses in the ORB software, confirming many assertions made by Worldcoin.
The audit commenced on Aug. 14, 2023, following concerns raised by various regulators worldwide about Worldcoin’s collection of biometric data, with some jurisdictions outright prohibiting its activities.
The audit
Trail of Bits’ audit sought to thoroughly investigate the orb’s software, with a particular emphasis on its management of personally identifiable information (PII) and the handling of users’ iris codes.
During the default opt-out registration process, the orb does not gather any PII aside from the iris code, which is neither stored persistently nor transmitted outside the orb. In cases where users choose to opt-in, their PII is encrypted on the orb’s SSD in such a way that even the orb itself cannot decrypt it — demonstrating a strong commitment to data privacy.
Related Posts
Additionally, the audit confirmed that the orb does not retrieve any extra sensitive information from a user’s device, with the sole data collected being from a QR code. This approach ensures minimal data collection, consistent with best practices in privacy.
Crucially, the iris code, an essential element of biometric data, is securely managed throughout its collection and transmission, significantly reducing the risk of unauthorized access or interception.
Recommendations
The audit also pointed out areas for enhancement, suggesting further fortification of the orb’s software and hardware configurations to enhance security.
In response, Worldcoin has made adjustments, including substituting a vulnerable library used for QR code scanning with a more secure option.
The Trail of Bits audit is just one aspect of Worldcoin’s continuous efforts to ensure the security and privacy of its technology. Given that the ORB technology is central to Worldcoin’s mission of providing a universal basic income, these thorough security evaluations are vital for sustaining user confidence and the integrity of the project.
Understanding the significance of transparency and community involvement, Worldcoin has encouraged public participation in its bug bounty program and intends to release future audit reports as they become available.
The post Trail of Bits completes Worldcoin security audits, finds no vulnerabilities appeared first on CryptoSlate.
