Remove Your Fingerprints

Should we be using biometric security measures? Aren’t they too hard to change?


FOLLOW US ON SOCIAL
---------------------------------------------------

[givowo]

rock climbing
we use biometrics for the time clock at my job and rock climbers have a wonderful time using them becuase their prints are always changine

[fanta]

I am surprised he had a laptop with fingerprint 15 years ago, was the login even in a secure enclave??

[werefox]

I used to work at Kroger and they use fingerprint scanners as part of the time clock system. My job as an overnight stocker destroyed my finger tips so I constantly had issues with my scans not registering, due to cuts and callouses and just generally damage from my work and bass guitar hobby. Finally I found that using the ring finger on my non dominate hand for scans was the best solution.

[Legitster]

FYI - A laptop with local biometrics would technically count as two factor authentication. Possession (you physically have the laptop) and inherence.

[YourLordMobius]

3000 grit sandpaper. Automotive body guys know the pain.

[tharealmb]

That was oddly specific.... And a terrifying prospect. I know in some countries police can't force you to give your password/code. But they can force you to give your fingerprints and/or unlock using your fingerprints.

[Algoinde]

This is why FaceID of any kind is weird. You can't change your face once it gets "compromised".

[nmotschidontwannagivemyrea]

Imagine if every time you touched something, you left behind a printout of your account password that people could take pictures of and recreate.
Biometrics are not secure.

[darthhodges]

The problem with biometrics is that if someone accesses something anyway you can't just change your password, they have access as long as you do.

[mvm]

(as a dev) I wonder about this, since the metric are in the best BEST case, a stream of data representing a 'clip/gif' of your finger print + maybe some extra biometrics heat/moisture whatever. Once you have that you can reuse it anywhere, it should always 'fuzzy' match so you can add some white noise to make it seems as a new unique scan of that finger print.

[sunla]

I don't use biometrics if I can avoid it.
I used to use fingerprint a decade ago, and it was secure then. It's highly encrypted and used to be something nobody was able to spoof. But recently, it's become feasible to spoof biometrics without the need of creating an artificial replica of the biometric medium, because it can be directly injected as code, so long as the systems can be compromised by utilizing exploits to allow code injection. Or even exploits to disable the lock in the first place. Hackers are creative, and have plenty of tools in their arsenal.

[samuvisser]

Its a good question and you should really only use biometrics if you know the device handles it as safely as possible. You can change your password, changing ur fase or fingerprints is possible but not without huge health complications

[Ben_RmZ]

I need more Dan content. Its the closest thing i can get to working with him and just absorbing as much information as I can.

[hrodebrt]

Chemist here, my fingerprints are essentially gone by this point from handling chemicals all day every day. Right now the smooth spots work as a way to trace my prints back to myself but at some point they will be gone.

[imark]

Funny I just got a call from somebody who locked themselves out of their phone. They enabled swipe pattern and then didn't unlock their phone with it as they were using their fingerprint. Fast forward they restarted their phone they don't know what their pattern was! Write down your pattern! They have hundreds of photos they want.

[Tehdead]

I really hope that bad pixel is still there on Wan show tn 🤣

[gabrielximenes]

Still can't believe the dead pixel was a setup.

[deelowe]

They went the wrong way with it. The concern is what do your do if your biometric is compromised - duplicated and stored in a database somewhere. This why security professionals say biometrics should only be for ID, not authentication.

[daktus]

Other people: oh no, im gonna bleed to death
Dan: so where do i sign the privacy non agreement ?

[SamCyanide]

Dan immediately going to nuclear options hahah