Comment on Microsoft’s Windows Hello fingerprint authentication has been bypassed

<- View Parent
MostlyHarmless@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

No, wrong. Still two factor because your fingerprint plus your device.

These authentication methods aren’t as simple as the two factor Google Authenticator 6 digit number. They are cryptographically secure keys. Even if someone finds out what the token is, they still cannot send a valid request because they cannot generate a digitally signed request using the private key locked in your device’s hardware, unlocked by your biometrics.

source
Sort:hotnewtop