News for hackers. Stuff that matters.

A comment on Logins are Dead, and Mobile Killed Them. Parent comment

Re:Logins are Dead, and Mobile Killed Them by dmitriy_ko on Friday July 13, 2012 @09:00PM (#4242691)
How about using fingerprint scanner for authentication? Or face recognition using front-facing camera? It's 2012 after all.
[ Parent | on HN ]
Re:Logins are Dead, and Mobile Killed Them by _morgs_ on Monday July 16, 2012 @03:17AM (#4249698)
The Samsung Galaxy S3 has face recognition. It can be unlocked using a photo of the user. Google Images search, point cam at laptop, bingo you're in.
[ Parent | on HN ]
Re:Logins are Dead, and Mobile Killed Them by nileshtrivedi on Wednesday July 18, 2012 @09:27PM (#4263958)
They "fixed" this in JellyBean.
[ Parent | on HN ]
Re:Logins are Dead, and Mobile Killed Them by einhverfr on Friday July 13, 2012 @10:55PM (#4242949)
too many false positives.

Now, an SD card with a certificate plus face recognition might be ok ;-)

[ Parent | on HN ]
Re:Logins are Dead, and Mobile Killed Them by ricardobeat on Saturday July 14, 2012 @12:51AM (#4243167)
Why an SD card? The phone itself is already a portable device you control.
[ Parent | on HN ]
Re:Logins are Dead, and Mobile Killed Them by einhverfr on Saturday July 14, 2012 @01:24AM (#4243228)
It depends on the app but at least in the areas I work (business apps relating to tracking money) I wouldn't assume that device authentication is sufficient.

But for biometrics, keep in mind that biometric systems are currently seen as the most subject to false positives of any authentication system out there with the possible exception of improperly maintained and insufficiently strong passwords.

[ Parent | on HN ]