3 ms·

I'm a huge fan of 'three factor authentication.' In my mind, ideally, secure auth. should test: 1. "something you know" (password) 2. "something you are" (bi

• ars 18y ago
  Of the 3 only the first is actually secure. All current 'something you are' systems can be fooled - and they can be copied without you even knowing it (fingerprint is very insecure for example, since you leave them everywhere, same for dna. Iris systems can be copied with a telescope.) 'Something you have' system are flawed because it's too easy to loose the item, or have it stolen. Or the item can be duplicated (often very easily, sometimes not so easy). Only 'something you know' is secure because it can never be taken from you or copied without your knowledge. Hence we have passwords.
  • emmett 18y ago
    The point is that the combination of the three is the most powerful and secure. To copy something-you-are, they have to have access to you or things you've touched. To copy something-you-have, they have to steal the object itself. To copy something-you-know, they have to trick you into revealing it (phishing) or guess it. Requiring all three makes things that much more secure.