5 ms·
I'm not sure why you're downvoted -- I don't agree with your conclusions, but many of the sibling posts are making grand statements about "biometrics are userna
by andrewla 7y ago
I'm not sure why you're downvoted -- I don't agree with your conclusions, but many of the sibling posts are making grand statements about "biometrics are usernames" while disregarding the threat model entirely.
I do disagree with a couple of your conclusions though, because the attacks you describe are all targeting you as an individual. There's a much broader class of attacks that should be worrisome -- adversaries seeking _any_ compromise of _any_ individual. Like getting a dump of passwords from neopets or something and trying all those passwords on Chase.
For that kind of adversary, password is vulnerable, and biometrics is secure. And that kind of adversary is by far the most dangerous and prevelant. Especially biometrics in the Apple secure enclave model, where the key material is secured by the biometrics but is very strong -- far stronger than a password can be.
- tjoff 7y agoFor phone login and such you can't really attempt a password without being physically in front of the phone anyway, so any device from any individual doesn't really apply, in this case.
- perl4ever 7y ago"For that kind of adversary, password is vulnerable, and biometrics is secure." The applications I'm familiar with, the password takes precedence. It doesn't require password and fingerprint. The thing is, if you add an extra factor, either you are required to use all of them, in which case it increases the risk of being wrongly locked out, or you are required to use any of them, in which case it increases the risk of the wrong person getting in.
- mantap 7y agoI have an iPhone (fingerprints) and Android phone (password only). My adversary: my jealous girlfriend. I found it functionally impossible to secure the android against my girlfriend as she could watch me enter any code or password multiple times. She was not able to get into the iPhone, because the biometrics prevented her from being able to view the passcode being entered. Summary: biometrics are a reasonable substitute for a trusting relationship. :)
- perl4ever 7y agoDon't you ever find that the fingerprint recognition fails? And in that case, can't you use your passcode? If not, then you're locked out.
- mantap 7y agoIt fails very rarely mostly if my hand is wet. Yes you can use the passcode and you are required to enter the passcode at lease once a week by design. But opportunity for shoulder surfing is reduced by a factor of hundreds since I probably unlock my phone 100 times a day.