Re:Quick Tip: Enable Touch ID for Sudo (2020)
by hunter2_ on Wednesday June 15, 2022 @12:45PM
(#31755653)
I think there are many cases where your listed assumptions about each (passwords and fingerprints) are agreeable, but one important difference makes passwords often superior: ability to change after a compromise. If your accounts get hosed because someone else can enter your password, you can start over and continue using password-based authentication; if someone else can enter your fingerprints, you start over and must not use fingerprints for authentication.
[ Parent
| on HN ]
Re:Quick Tip: Enable Touch ID for Sudo (2020)
by lstamour on Wednesday June 15, 2022 @01:13PM
(#31756082)
True. But unlike a password, biometrics often also act as a second factor in that they authorize a particular device and can’t easily be done remotely. Even if my fingerprints were compromised, I’d probably continue using biometrics instead of or in addition to a password. I’m a fan of Yubikey with biometrics, for example, because it’s an extra layer of security. Just don’t lose a finger or hand or you’ll never easily authenticate again…