3 ms·
you can't rotate biometry if its compromised
by jakelarkin 9y ago
you can't rotate biometry if its compromised
- archgoon 9y agoMay be worth it for in-person reclamation of identity. Use biometrics only when acquired in person. Beats having to dreg up my high school year book, social security card, birth certificate, and high school transcript (None of which are actually inspected of course).
- dredmorbius 9y agoHow do you defend against / defeat replay attacks?
- archgoon 9y agoIn person? When you're actually seeing that it's their thumb and eyes that are being scanned?
- dredmorbius 9y agoHow do you, as a third party, know that the validation occurred in person? How do you defend against replay attacks?
- archgoon 9y agoSo you agree that if it is done in person, it'd be difficult to fake?
- ars 9y agoBiometry for verification of identity, not verification of intent. Once you verify they are who they say they are, you can do a second step to verify they actually intend to do some secure action.