3 ms·
This would only work if you could somehow reliably produce a predictable string of some sort from the scan of a fingerprint, but you can't. Unless it's decrypti
by bandrami 3y ago
This would only work if you could somehow reliably produce a predictable string of some sort from the scan of a fingerprint, but you can't. Unless it's decrypting the keychain by an artifact of the scanning process itself, the password is stored and available somewhere on the computer, in a "secure enclave" or not. And I don't want that. If the finger scanner is just the warden of something that has the power to unlock the keychain without the password that is only stored in my grey cells, then someone can shim a fake finger scanner that pretends to have found a match.
- ycombinatrix 3y agobiometric yubikey seems to be a viable solution
- deleted 3y ago[deleted]
- captainmuon 3y agoThere are protocols that you can use to authenticate the fingerprint scanner [1]. When they are not used you can indeed just shim a fake scanner and unlock the PC [2]. This all assumes that nobody can break into the secure silicone of the the fingerprint scanner (or the PC) of course, but that is a pretty high bar. [1] https://github.com/microsoft/SecureDeviceConnectionProtocol https://github.com/microsoft/SecureDeviceConnectionProtocol [2] https://www.theverge.com/2023/11/22/23972220/microsoft-windows-hello-fingerprint-authentication-bypass-security-vulnerability https://www.theverge.com/2023/11/22/23972220/microsoft-windo...