3 ms·
Actually it's not, if you have the physical device you more or less already cracked the fingerprint scanner. You could also be compromised by your glass in a b
by LunaSea 12y ago
Actually it's not, if you have the physical device you more or less already cracked the fingerprint scanner.
You could also be compromised by your glass in a bar, a handshake, the door handle of your car or your house.
Passwords can be changed but you can't change a finger so this sums up why fingerprints are shit.
- jakobegger 12y agoLook at the procedure required to create a fake finger: http://istouchidhackedyet.com http://istouchidhackedyet.com Most importantly, it requires a perfect finger print image. Random smears from your phone screen or a glass won't work. The process is so complicated that only a very small percentage of the population is able to do it; anyone can peek over your shoulder when you unlock your phone (which most people will do dozens or hundreds or hundreds of times per day). Last, remember that you only have limited attempts with your fake finger; in the demonstration video they only show unlocking a freshly trained phone in a controlled setting, they don't actually unlock a phone "in the wild".
- LunaSea 12y agoThe process is very easy, I did it multiple times in high school for a project. Legally, scanners are only allowed to save a certain amount of key points in your fingerprint, not the whole fingerprint. False-positives are thus likely as are fingerprint collisions (like hash collisions). And you still can't modify your finger once it has been hacked a SINGLE time.
- jakobegger 12y agoClearly we seem to have a different idea of what constitutes "easy". I'm not claiming that biometric authentication is a good idea against a targeted attack. But I do think that they offer adequate protection against opportunistic attacks. It prevents random thieves from accessing my data, and it's convenient enough that people actually use it. It will significantly increase security on average. If someone is targeting you specifically, neither a fingerprint nor a (usually short) passcode is adequate protection.
- LunaSea 12y agoBut I can change de passcode and even use a longer passphrase if I feel the need to have a higher security standard.