3 ms·
That's the problem with any biometric data being used for authentication: once an attacker gets a copy, it's game over. Biometric passports are a means of iden
by jarfil 7y ago
That's the problem with any biometric data being used for authentication: once an attacker gets a copy, it's game over.
Biometric passports are a means of identification, not authentication, with the biometric data being signed by a trusted third party, but not considered a secret. The only protection they include is a password printed inside the passport to thwart silent NFC data access.
- edelans 7y agoIndeed, "biometrics are usernames, not passwords". It reminds me of an old thread : http://blog.dustinkirkland.com/2013/10/fingerprints-are-user-names-not.html http://blog.dustinkirkland.com/2013/10/fingerprints-are-user... HN discussion : https://news.ycombinator.com/item?id=11549536 https://news.ycombinator.com/item?id=11549536
- Aaargh20318 7y ago> Indeed, "biometrics are usernames, not passwords". Biometrics are neither. They are a completely separate factor in authenticating a person, and used in different scenario's. Biometrics have advantages and disadvantages based on your threat model. For example, unlocking your laptop with a fingerprint while working on a train or plane might be preferable to a username/password because the risk of a shoulder-surfer may be higher than the risk of someone lifting your fingerprint.