• Gormadt@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      46
      arrow-down
      1
      ·
      6 months ago

      If it’s compromised you can’t change it for one

      Also you can’t be legally forced without a warrant to give a password but biometric data you can be legally forced without a warrant to give up

    • Björn Tantau@swg-empire.de
      link
      fedilink
      arrow-up
      16
      ·
      6 months ago

      With a password you can have an exact binary comparison. Either you supplied the correct password or you didn’t.

      But with biometrics you just have an approximation because your fingerprints change slightly due to the position in which you hold them, your health, humidity, pressure and probably other stuff I’m not thinking of. So the sensor can only say that it’s like 95 % or whatever sure that it got the correct fingerprint. And this uncertainty makes it much easier to exploit.

      And your fingerprint is not secret. You leave it all over the place. Especially on devices you use every day. And your fingerprint can (and will) be taken without your consent. And you cannot change your fingerprint if it gets compromised.

      All those spy movies showing how trivial it is to circumvent biometric security have in common that whatever method they used was realistic.

      • Twitches@lemm.ee
        link
        fedilink
        arrow-up
        4
        ·
        6 months ago

        Lol my hands are jacked from physical labor and health, scars on my fingers, dry skin, my thumb print only works only 50% of the time anyhow.

    • MonkderDritte@feddit.de
      link
      fedilink
      arrow-up
      7
      arrow-down
      1
      ·
      6 months ago

      Biometric data can be used as login but is unsuitable as password, since it can’t be changed once compromised.