I had suggested earlier that the RSA conference badge could be some kind of token with an associated revocation and replacement fee (as opposed to being forced to pay a full conference rate for a lost/stolen badge). I just realized as I navigated the swarms of vendors that the badges do, in fact, have to be linked to the vendor acquisition systems. They seem to use a proximity-reader. So a reader with revocation capabilities not only would be a trivial addition to the entrance-way, but the expo floor is covered in the things. What gives? Imagine if a company tried to manage it’s authentication/authorization system by asking users who lose their badges to repay the entire value of assets they are meant to protect…

Anybody else here?