News for hackers. Stuff that matters.

A comment on Fingerprints are Usernames, not Passwords.

Re:Fingerprints are Usernames, not Passwords by santosha on Tuesday October 01, 2013 @02:17PM (#6478024)
A very good point. One of the most important things about strong authentication schemes is the revocation protocol. When things go bad, how easy and secure is the process of changing the auth mechanism? The trouble with fingerprints is that you're stuck with them for life, even if somebody else <pun> gets their hands on them </pun>.
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by x0054 on Tuesday October 01, 2013 @02:33PM (#6478141)
Wouldn't the revocation process be very simple? If some one has acquired your prints, just stop using touch ID? I mean, there are still 2 other authentication options on the iPhone.
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by sk5t on Tuesday October 01, 2013 @02:43PM (#6478211)
That's a bit like saying "if someone has compromised your SSL certificate, stop using SSL; how about Kerberos?"
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by vectorjohn on Tuesday October 01, 2013 @02:42PM (#6478201)
There are also 9 other fingers. Granted, not all of them are convenient to use.
[ Parent | on HN ]