22 ms·

Unfortunately when it's "stolen", you can't be issued a new fingerprint. Worse, you leave them everywhere. I think it would be naive to believe this won't becom

by e2le 4y ago

Unfortunately when it's "stolen", you can't be issued a new fingerprint. Worse, you leave them everywhere. I think it would be naive to believe this won't become a method of committing fraud, perhaps even a common one.

Gigachad 4y ago
It’s hard to tell how it works from the article, but this is not a major issue if it’s used as a second factor for authentication. Apple Pay is an adequate system imo. It requires both your face and your physical phone to make a payment. It’s not exactly a realistic threat that someone steals your phone and builds a model of your face to use at a retail checkout. I could see biometrics being used as an alternative to card pins where you tap your card and then scan your hand. This would be more secure than the current system where you can tap under $200 with no authentication.
- Loic 4y ago
  I am always impressed by the ingenuity the people have to exploit the security systems, bump keys, car proximity keys signal relay, car bluetooth opening from Tesla, "card readers" in ATMs, non secure Wifi poisoning, etc. These were all non realistic threat. This makes me very conservative with all these integrations and more software running and databases to just make it more convenient than a 4 digit PIN.
  - Gigachad 4y ago
    >These were all non realistic threat. They still are. How many stories are there of people actually having their cars stolen via remote relay attacks? It gets demoed a lot in proof of concepts but I have never heard of it being actually executed. Why on earth would someone build fake fingerprints when they can just walk in to a designer handbag store with a knife, grab a few bags, and resell on facebook market place. Credit cards don't _need_ bulletproof security, they just need to be secure enough. Fraud can often be reversed and fraudsters don't get away with it many times since there is CCTV in every location that takes card. The card companies would rather opt to eat the losses on any non reversible fraud because the profits of a friction less user experience is worth more.
- brendoelfrendo 4y ago
  Or just require the PIN for all transactions? I have a hard time believing that the gas station down the street is going to adopt high quality scanners that can process my handprint faster than I can type my PIN.

by e2le 4y ago

Gigachad 4y ago

It’s hard to tell how it works from the article, but this is not a major issue if it’s used as a second factor for authentication. Apple Pay is an adequate system imo. It requires both your face and your physical phone to make a payment. It’s not exactly a realistic threat that someone steals your phone and builds a model of your face to use at a retail checkout. I could see biometrics being used as an alternative to card pins where you tap your card and then scan your hand. This would be more secure than the current system where you can tap under $200 with no authentication.

Loic 4y ago
I am always impressed by the ingenuity the people have to exploit the security systems, bump keys, car proximity keys signal relay, car bluetooth opening from Tesla, "card readers" in ATMs, non secure Wifi poisoning, etc. These were all non realistic threat. This makes me very conservative with all these integrations and more software running and databases to just make it more convenient than a 4 digit PIN.
- Gigachad 4y ago
  >These were all non realistic threat. They still are. How many stories are there of people actually having their cars stolen via remote relay attacks? It gets demoed a lot in proof of concepts but I have never heard of it being actually executed. Why on earth would someone build fake fingerprints when they can just walk in to a designer handbag store with a knife, grab a few bags, and resell on facebook market place. Credit cards don't _need_ bulletproof security, they just need to be secure enough. Fraud can often be reversed and fraudsters don't get away with it many times since there is CCTV in every location that takes card. The card companies would rather opt to eat the losses on any non reversible fraud because the profits of a friction less user experience is worth more.
brendoelfrendo 4y ago
Or just require the PIN for all transactions? I have a hard time believing that the gas station down the street is going to adopt high quality scanners that can process my handprint faster than I can type my PIN.