2 ms·
It's unfortunate that so much emphasis has been placed on biometrics (especially fingerprints) as a security measure, more so because of their convenience which
by gtf21 11y ago
It's unfortunate that so much emphasis has been placed on biometrics (especially fingerprints) as a security measure, more so because of their convenience which lulls users into a false sense of security.
Not only can biometrics not be changed, unlike a password, but they cannot be withheld from a would-be accessor in the way that a password can (until mind reading becomes a thing, that is).
I don't know how true this is, but it feels like biometric authentication for consumers has sucked the oxygen out of attempts to create convenient but secure authentication that doesn't have the same flaws (I don't know what a potential system would be, but there have to be better alternatives). Lazy reliance on biometrics will, I think, make us all a lot less secure.
- shkkmo 11y agoI think people are figuring this out will and use biometrics as a second, or ideally third factor for authentication. As far a bad authentication, this bothers me far less than when people (and this includes banks!) use my birthday, residence history, or other easily mine-able information to establish identity.
- ajcarpy2005 11y agoAnother design pattern that makes little security sense is to email passwords in the clear in confirmation emails after signup