Re:Fingerprints are usernames, not passwords (2013)
by valuearb on Friday September 15, 2017 @12:03PM
(#15258214)
Someone
1) lifted it off some surface.
2) got the right fingerprint when they did it
3) modeled a fake fingerprint well enough that it would fool touchID
4) Was able to get access to your touchID device while you weren't aware or unable to stop them
Most experts recommend that you instead use a pin-code of at least 6 numbers, or a password of at least 12 random characters using at least one number, and at one punctuation mark. In that case the attacker's algorithm changes to
1) Check for posted note containing password on computer monitor, or
2) Check purse or wallet for posted note containing passcode
1) lifted it off some surface. 2) got the right fingerprint when they did it 3) modeled a fake fingerprint well enough that it would fool touchID 4) Was able to get access to your touchID device while you weren't aware or unable to stop them
Most experts recommend that you instead use a pin-code of at least 6 numbers, or a password of at least 12 random characters using at least one number, and at one punctuation mark. In that case the attacker's algorithm changes to
1) Check for posted note containing password on computer monitor, or 2) Check purse or wallet for posted note containing passcode