if the data breaches we hear about almost monthly (Uber, Target, etc) are any indication, your password is just as at risk as your fingerprint.
Two things - let's assume these companies follow best practices and both the fingerprints, biometric details and passwords are all hashed. Still:
a) Unlike a password your biometric data is publicly obtainable.
b) You cannot change your biometric data after it's been compromised.
As someone who actively researches biometric authentication,
If you are an expert in the field - I think you are doing people an active disservice by telling them the security is just as good.
Finally I think typing passwords just isn't that hard - everyone is used to it by now. I maybe odd in this - but its hard for me to see the greater degree of convenience as a huge breakthrough (even without the security implications).
Read the post, i never discuss the security or merit of a biometric versus a standard user/pass login. I only discuss the advantages/disadvantages and goals of each system. If you inferred a recommendation for one or the other then you misunderstood.
Finally I think typing passwords just isn't that hard - everyone is used to it by now. I maybe odd in this
I completely agree. However, when you see people go to their 'secret drawer' and open up their password book to login to X, then you realize it's a fundamentally broken system (just as using a raw biometric is).
Comments
Two things - let's assume these companies follow best practices and both the fingerprints, biometric details and passwords are all hashed. Still:
a) Unlike a password your biometric data is publicly obtainable.
b) You cannot change your biometric data after it's been compromised.
If you are an expert in the field - I think you are doing people an active disservice by telling them the security is just as good.
Finally I think typing passwords just isn't that hard - everyone is used to it by now. I maybe odd in this - but its hard for me to see the greater degree of convenience as a huge breakthrough (even without the security implications).
Read the post, i never discuss the security or merit of a biometric versus a standard user/pass login. I only discuss the advantages/disadvantages and goals of each system. If you inferred a recommendation for one or the other then you misunderstood.
I completely agree. However, when you see people go to their 'secret drawer' and open up their password book to login to X, then you realize it's a fundamentally broken system (just as using a raw biometric is).