2 ms·
It falls short, because biometrics <> passwords. As I said, biometrics == identity. Compare biometrics with identity: 1) Your identity is not secret. Your mot
by dustinmoris 6y ago
It falls short, because biometrics <> passwords. As I said, biometrics == identity.
Compare biometrics with identity:
1) Your identity is not secret. Your mother knows you, your entire school knows you, your neighbour knows you, when you go anywhere the police may ask for your ID at any time and knows you. Biometrics is the same.
2) You don't hide every day from the world. You don't cover your face (ok maybe before COVID) when entering a shop ;)
3) You cannot change who you are. You shouldn't have to and shouldn't want to. Same for biometrics.
4) If your identity is discovered then of course they know who you are. Same applies for biometrics.
So yes, biometrics isn't passwords, it's identity. Username + Password is a workaround to establish a person's identity and will never be as good as a biometric. The fact that you can have multiple usernames but only the same right index fingerprint is proof that biometrics is superior in establishing your identity than username + password.
- bnj 6y agoI see what you’re saying about real world identity but digital identities don’t [have to] share those constraints. Digital identities can be instantiated and discarded at will.
- JoeAltmaier 6y agoNot if they're 'secured' by biometrics. Then they are almost trivially subvertable.
- ogre_codes 6y ago> It falls short, because biometrics <> passwords. As I said, biometrics == identity. This is just dogma, it's not based on the actual implementation details. TouchID for the web requires: Something you are (biometric), and something you have (Your phone/ computer). If someone "Discovers" my fingerprints, they are worthless without the phone/ computer which has the Secure Enclave I've matched them to. If my phone is stolen, I can invalidate the entire device as a method of authentication.