Comment on Microsoft’s Windows Hello fingerprint authentication has been bypassed

• BorgDrone@lemmy.one ⁨11⁩ ⁨months⁩ ago

  As with all things security, it depends entirely on your thread model and the value of what you’re trying to protect.

  Biometrics can be a much more secure option than using a PIN or password, depending in circumstances.

  For example: when I’m working on my laptop on the train or in a coffee shop and I need to log into some website I’d rather use my fingerprint to unlock the passkey than type in a password in a public place where I have no idea who is observing me entering my password.

  Same goes for paying with your phone, you can either enter your phone PIN in a crowded supermarket or you unlock with FaceID.

  source
• Mongostein@lemmy.ca ⁨11⁩ ⁨months⁩ ago

  Can you explain how?

  source

  • seaQueue@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Biometrics can be spoofed, or the body part stolen in extreme cases.

    Also, in the US at least, biometrics aren’t protected by the same rights that allow you to not incriminate yourself. IIRC they’re considered a thing you have, which you can be compelled to surrender or use to unlock a device, vs something you know (like a password or pattern) which you can withhold if it would be incriminating. Check with a lawyer on this one, I haven’t paid attention to the case law here for a bit.

    source

    • Squeak@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Someone is stealing my body parts, what they access on my devices is the least of my worries!

      source

      • wmassingham@lemmy.world ⁨11⁩ ⁨months⁩ ago

        They don’t have to be stolen. Imagine some clever thief drugging your drink, then when you’re incapacitated they take your phone and press your finger to it or hold it up to your face to unlock it, then transfer all your money out of Venmo or whatever money transfer app you have on your phone.

        source

        • -> View More Comments
      • Imgonnatrythis@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

        Really? Would be up there for me. Sucks to miss a finger or eyeball, but if they’ve also drained my bank account and my credit card - I’m going to be even more pissed for sure.

        source
  • AbidanYre@lemmy.world ⁨11⁩ ⁨months⁩ ago

    All OPM how they plan on getting my fingerprints back.

    source