Goodbye, Password. Banks Opt to Scan Fingers and Faces Instead

Re:Goodbye, Password. Banks Opt to Scan Fingers and Faces In... by dragonwriter on Tuesday June 21, 2016 @07:10PM (#11950219)

> fingerprints are usernames, not passwords

While the article you linked to points out correctly why they aren't good as passwords, they also aren't good as usernames (though they may be good as an alternative by which a username is looked up, with a fallback to using the real username), since they can be destroyed.

[ Parent | on HN ]

Re:Goodbye, Password. Banks Opt to Scan Fingers and Faces In... by ben-schaaf on Tuesday June 21, 2016 @11:48PM (#11951427)

Another reason they aren't good usernames is that they are not unique. Almost unique isn't good enough for uniquely identifying a user.

[ Parent | on HN ]

Re:Goodbye, Password. Banks Opt to Scan Fingers and Faces In... by _red on Tuesday June 21, 2016 @07:45PM (#11950409)

"Searching" on fingerprints is difficult to scale as users move from tens to thousands.

The best system is:

1. User inputs username.

2. Fingerprint is used to confirm username.

3. User inputs password.

[ Parent | on HN ]

Re:Goodbye, Password. Banks Opt to Scan Fingers and Faces In... by tectec on Tuesday June 21, 2016 @08:22PM (#11950624)

Palm prints were used at a nuclear facility I visited as an alternative to fingerprints in step 2. After you scan your id card you scan your palm print and the system verifies the palm matches the one that is registered with the card. They are not as unique as finger prints but it makes it much more difficult to use someone else's card (or username).

[ Parent | on HN ]

Re:Goodbye, Password. Banks Opt to Scan Fingers and Faces In... by dragonwriter on Tuesday June 21, 2016 @07:46PM (#11950419)

If you use fingerprint to confirm username, you have to have an alternate means to do that, because fingerprints can be destroyed.

[ Parent | on HN ]