News for hackers. Stuff that matters.
Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by j45 on Thursday October 17, 2019 @11:29AM (#21283101)
Biometrics are not secure to use for both a username and password combined.

At best, biometrics are good as a username to identify who you are, but not that you consent to login.

At best, todays biometrics are a trade off in security for convenience, partially because most can be faked.

I look to modern banking startups for biometrics use because money and personal data are similarly valuable and sensitive. If they aren't using it, it's not secure, or ready.

We are somehow ok with touch and faceid without some form of 2FA.

Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by TheRealSteel on Thursday October 17, 2019 @11:39AM (#21283205)
Well, it's certainly harder to fraudulently use than a PIN, which can be obtained by just looking over the person's shoulder.
Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by deelowe on Thursday October 17, 2019 @01:03PM (#21284057)
For the initial compromise, sure, but once a biometric system is compromised, it could conceivably be compromised forever. This is what makes it a bad system for anything except identification (even then, I can imagine a few corner cases where it may be a bad idea).
Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by alpaca128 on Thursday October 17, 2019 @01:51PM (#21284579)
Imho the best compromise was the lockscreen on the pre-Android Blackberry smartphones where you have to move a grid of random digits so that the right digit hovers on the right spot of a picture. Safe against onlookers, not reliant on biometrics and still quicker than entering a password.

But right now I doubt the fingerprint sensors will go away soon, nothing really beats them in terms of convenience.

Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by petters on Thursday October 17, 2019 @04:41PM (#21286180)
> But right now I doubt the fingerprint sensors will go away soon,

The Pixel 4 does not have a fingerprint reader....

Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by alpaca128 on Thursday October 17, 2019 @05:10PM (#21286389)
The article is about the Galaxy S10 and I was talking about fingerprint scanners on phones in general.
Re:Samsung: Anyone's thumbprint can unlock Galaxy S10 phone by j45 on Friday October 18, 2019 @12:05AM (#21288582)
Marginally in some cases. I’d think biometrics with a pin or a 2FA pin could be useful in some cases.