3 ms·
I guess I like the trade-offs of something-you-have/something-you-know even if the cost of faking them is actually lower. I am probably in a minority.
by rrmm 10y ago
I guess I like the trade-offs of something-you-have/something-you-know even if the cost of faking them is actually lower.
I am probably in a minority.
- Klathmon 10y agoCould you setup your system to still need "something you know" when logging in, but use your TouchID for additional authentication (like sudo) once already in the system? That seems like the best of both worlds there.
- arnarbi 10y agoWhen done correctly, fingerprints are both something you are and something you have: The fingerprint data should reside in and work only to activate an HSM that then proves possession of an attested key pair. That way the HSM (and the device it sits in) is your something to have.