News for hackers. Stuff that matters.
Re:Quick Tip: Enable Touch ID for Sudo (2020) by FabHK on Wednesday June 15, 2022 @11:47AM (#31754783)
This was not a negation, but a helpful clarification of what assumptions are made in either case (and thus, what your threat model must consider).

Namely: if you are forced to comply, it doesn't matter in either case.

If your password can be "obtained through a post-it, [...] phishing, guessing" etc. (key logger), then you might be better off with biometric authentication.

If your fingerprint can easily be extracted (and the sensor be fooled by it easily), then you might be better off sticking with the password.

Those clarifications give you a good way to think about the tradeoffs.

There are no comments on this comment yet.