fingerprints != passwords

[Paul Mooring]

This article makes some excellent points about using fingerprints as
authentication, but I find it's conclusion of continuing to use passwords a
bit suspect. The chances of your fingerprint being compromised are real,
but no more real than the chances of your password being compromised (brute
force, rainbow tables, weak hashing/no salt).  In my opinion the take away
should be use 2 factor auth all the time and I also think fingerprints can
be an excellent form of 2 factor auth (I forget my phone/2FA device more
than I forget my fingers).

On Fri, Nov 21, 2014 at 11:43 PM, der.hans <PLUGd at lufthans.com> wrote:

> moin moin,
>
> biometrics aren't secret enough or flexible enough to use in place of
> passwords.
>
> http://blog.dustinkirkland.com/2013/10/fingerprints-are-
> user-names-not.html
>
> ciao,
>
> der.hans
> --
> #  http://www.LuftHans.com/        http://www.PhxLinux.org/
> #  Data restorals via Freedom of Information Act requests.
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>



-- 
Paul Mooring
Operations Team Lead
Chef
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20141122/7bd07169/attachment.html>