4 ms·
Biometrics seem worse-is-better: you now have some unique identifier for me, which is totally swell until the inevitable DB breach. Which breech will likely be
by smitty1e 3y ago
Biometrics seem worse-is-better: you now have some unique identifier for me, which is totally swell until the inevitable DB breach.
Which breech will likely be due to an Admin whoopsie of some sort.
Because the people remain the weakest link.
- wkrause13 3y agoCould you elaborate on your concern? My understanding of how most biometric auth works is that it functions a lot like passwords in that your features get translated into a non-reversible hash that should be meaningless to any other biometric auth system.
- SketchySeaBeast 3y agoYeah, assuming that my biometric auth is relatively strong, stays on my device, and is a device-specific hashed representation I have a hard time finding fault. I believe most modern phone's biometrics fit that criteria.
- smitty1e 3y ago> stays on my device Heh.
- SketchySeaBeast 3y agoOK, so we're at that level of contribution, are we?
- smitty1e 3y agoI'm just saying that the information staying on the device is aspirational. I see that this skepticism has offended.
- SketchySeaBeast 3y agoWell because, to me at least, it's less skepticism and more cynicism.
- wkrause13 3y agoWhat do you think would happen if it didn’t stay on your device? Just trying to understand if there’s an attack vector I’m missing. What could one do with that information given how it is encoded?
- justanorherhack 3y agoBiometrics don’t require consent. Just hold up a friends phone towards their face.