News for hackers. Stuff that matters.

A comment on I recommend against using biometric identification. Parent comment

Re:I recommend against using biometric identification by KGIII on Tuesday September 12, 2017 @06:09PM (#15233366)
Who you are, what you have, and what you know. Those are what we need to have good security. Fingerprints confirm who you are. What you have is the phone, in this case. What you know is the password.

If you're concerned about security, use the print/face and the password.

[ Parent | on HN ]
Re:I recommend against using biometric identification by IncRnd on Tuesday September 12, 2017 @09:24PM (#15234703)
Fingerprints do not confirm identity.

A phone is not what you have in the context of this discussion. What you have would be an NFC, for example to authenticate to the phone. A phone is only what you have, when you use the phone as evidence to authenticate into a different system.

[ Parent | on HN ]
Re:I recommend against using biometric identification by maxerickson on Tuesday September 12, 2017 @06:15PM (#15233416)
Fingerprints don't confirm who you are though.

In certain circumstances they can, but a phone sensor accepting whatever input it is being given isn't one of those circumstances.

[ Parent | on HN ]
Re:I recommend against using biometric identification by KGIII on Tuesday September 12, 2017 @06:17PM (#15233435)
They do an adequate job for the vast majority of use cases. I guess you could hire a security guard to walk with you and ensure your ID matches your physical traits?

Nothing is ever completely secure and usable. There will be some trade offs.

[ Parent | on HN ]