Questions tagged [biometrics]
Biometrics is a set of methods related to unique identification of people based on physiological or behavioural traits
146
questions
0
votes
0
answers
90
views
How 2FA with Biometrics improve security?
Where I work, this is the passwordless registration/login flow for our Mobile App
A user registers with a username and a phone number. An SMS OTP is sent to the phone number to verify it.
Initial ...
-2
votes
1
answer
178
views
Biometrics the only real security
Since 2FA exploits are increasing, and most end-users are hellbent on using the least secure passwords available, are biometrics the only real security left?
- 11
0
votes
1
answer
78
views
Authentication via User Interaction (Game play, using ML)
Something you know (password), something you are (biometrics), something you have (key card/security key) are the typical authentication factors.
Several years ago I've seen a paper in which the users ...
- 3,932
16
votes
5
answers
9k
views
Can fingerprint readers be trusted?
I've recently obtained a new notebook, specifically a Thinkpad. Now I found out that it has a fingerprint reader integrated into the power button. I am skeptical about biometrics as a security ...
- 270
0
votes
0
answers
110
views
Difference between PassKeys and using touch-id to login in Apps
PassKeys is a new way to sign-in to web-apps and mobile apps by FIDO alliance.
I looked at it and could understand how it works; However, I'm unable to understand difference from using touch-id to ...
0
votes
1
answer
297
views
Why does iOS allow using passkey without biometric? [closed]
One of the touted features of passkeys is that they depend on a biometric in order to use them. However, on an iPhone, if the finger-print scanner isn’t successful, it offers you the option of using ...
- 1,177
2
votes
1
answer
1k
views
Re-authentication with biometrics in a mobile app using access token
My mobile app has this (fairly common) authentication user experience:
user signs in with email and password
user is prompted to enable biometrics for faster access next time
when user returns to app ...
- 175
3
votes
1
answer
193
views
How are the bank's "voiceprint" authentication methods secure?
A few years ago, an agent from the bank rang up to say my credit card was compromised. But first they wanted me to confirm who I was. I refused, they were ringing from a private number, they could ...
- 301
3
votes
1
answer
667
views
Could high res photographs of eyes be used to fool eye based biometrics?
There's a company called irisgalerie that takes high res photographs of your eye and then sells prints to you. So let's say you got one of these pics and then posted it on social media. Could someone ...
- 1,748
2
votes
2
answers
128
views
How can a users plaintext password be acquired while using biometricID with the following security model?
This is a slightly tough one to explain with my current experience, lacking mainstream terminology. But here goes.
I have an encryption/security model whereby I do not store users plaintext passwords. ...
- 261
0
votes
0
answers
148
views
Solutions for out of band biometric login
I am enhancing our login flow to include biometric verification via your phone. The user will log in to the desktop app but will have to verify their identity via their phone. We already have an app ...
- 101
19
votes
4
answers
6k
views
How is TouchID more secure than a simple password?
This likely stems from my complete lack of familiarity with encryption technology and IT security in general, however it isn't clear to me how biometric authentication (such as Apple's TouchID) makes ...
- 301
0
votes
0
answers
23
views
Are fingerprints stored in biometric checks? [duplicate]
There is a digital banking app for increasing wallet limits. We can verify our fingerprint with this feature.
My question is, is it safe to use? I mean are they going to store my fingerprint and then ...
- 1
0
votes
1
answer
129
views
Voice input as security measures for system authentication
Can voice input as a password be a useful security measure as an alternative to a strong password and biometrics (face, thumb, signature etc)?
The voice inputted as a password will be saved as a sound ...
- 133
0
votes
0
answers
540
views
What are the differences between ISO 19794-2 and ANSI 378 fingerprint template?
I am looking for the differences between the ISO 19794-2 and ANSI 378 fingerprint templates.
If there are differences, for what types of applications are each of these standards most suitable?
- 101
10
votes
1
answer
2k
views
Are fingerprints less secure (at a software level) on Android (10+)?
Inspired by this question (and more specifically, this answer to the same):
When a passphrase is used, the encryption key is not stored directly in the device. […]
When using biometrics, each reading ...
- 423
0
votes
0
answers
240
views
How can one avoid being identified by facial recognition in a public setting?
Facial recognition is ubiquitous and methods like disguises, surgical masks and makeup are becoming ineffective owing to the improvement in algorithms.
In light of these advances, what are some ...
- 1
0
votes
0
answers
189
views
How reliable is a mathematical model of a human fingerprint for identification?
How reliable is a mathematical model of a human fingerprint for identification?
I am looking for a way to uniquely identify individuals that is very reliable and easy to use that does not require ...
- 93
0
votes
2
answers
216
views
How/What to prompt user for fingerprint login using smartcard?
We are using a PIV smartcard that has biometric information (fingerprint) of the user encoded on the card to login into our application. We have the capability to read the fingerprint from a reader ...
22
votes
4
answers
4k
views
How will biometrics be a safe way to authenticate users across the internet?
Let's say Alice created a new account on a service and this service saved her fingerprint as a way of logging in later. Then Alice creates a new account on a new service, but unfortunately this second ...
- 1,219
2
votes
1
answer
403
views
How are fingerprints secure on Samsung A70
I use keepass to store my passwords and the keepassdx app to access that database on my Android phone. It offers the option to allow me to unlock with a fingerprint, if I set up fingerprint Auth on my ...
- 473
-3
votes
2
answers
246
views
Number of biometric samples required to form an exhaustive set of fingerprint hashes?
Number of biometric samples required to form an exhaustive set of fingerprint hashes?
Slight variations in the sample produce different hash values of the sample data. The answer linked below ...
- 93
17
votes
2
answers
5k
views
Does biometric authentication in Android transfer any biometric data to the app?
On my Android phone I use several apps that propose biometric authentication. If I enable it, can these applications read my fingerprint data and transfer it to the third party servers?
- 687
1
vote
2
answers
658
views
Can a fingerprint be reconstructed from a device that uses it for authentication?
I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days.
Do these devices store information in such a way that your fingerprint could be reconstructed ...
- 201
55
votes
8
answers
11k
views
How can we eliminate passwords given the problems with biometric authentication?
I've read articles suggesting that passwords will eventually go the way of the dinosaur only to be replaced by biometrics, PINs, and other methods of authentication. This piece claims that Microsoft, ...
- 801
0
votes
0
answers
214
views
Does mobile biometric authentication count as Knowledge, Possession, or Inherence authentication
Apple claims in this year's WWDC that Face ID and Touch ID count for both Possession and Inherence identity factors, because they are using Biometrics (Inherence) to access the secure element on your ...
0
votes
2
answers
969
views
Should password reset disable biometric sign in until the user signs in with username and password again?
Background: My team's mobile apps have biometric sign in (Touch ID, Face ID, fingerprint). You can enable and disable biometric sign in when you are signed in. You always have the option to sign in ...
- 103
-1
votes
1
answer
122
views
Why computers accept biometrics as first authentication but not phones
After powering on laptops and desktop computers, you are allowed to use biometrics for login. But, as far as I know, biometrics are not allowed for unlocking phones after powering them on. You are ...
- 99
1
vote
0
answers
98
views
MFA: can unique biometrics collecting device count as another authentication factor (a possession factor)?
I see in this answer (Aren't endpoint devices inherently MFA?) that an endpoint device doesn't qualify as an authentication factor (AF). But if the endpoint biometric collecting device is uniquely ...
- 11
2
votes
3
answers
210
views
How are biometrics tougher to crack than a pin?
When I hear that bio-metrics are tougher to crack, it's left ambiguous as to whether they refer to the term 'hack' as simply getting through the system by guessing the password or mimicking the person....
- 123
1
vote
1
answer
429
views
Biometric authentication against server
I'm working on an iOS app whose login system does not seem entirely secure but I don't know enough to be sure.
Skipping account creation, the first time the user logs in they send their user and ...
- 11
1
vote
0
answers
202
views
Is Apple’s Face ID less secure in the dark?
Apple’s FaceID on iPhone X works even in the dark using infrared light to “illuminate” your face with an IR projection and collect the features.
When designing the algorithms that confirm a user’s ...
- 127
2
votes
0
answers
167
views
Is what fingerprint scanners in mobiles store a stealable value?
If a fingerprint scanner were a human it would probably be like this:
take a photo of the finger presented for authentication
check it against the original photo to determine if it's the same.
This ...
- 473
3
votes
1
answer
257
views
Is it safe to store and transmit fingerprint templates in ANSI or ISO formats in cleartext format?
I working on a setup where I'm getting users to scan their fingers for fingerprint at a local machine but, the templates are stored at a centralized server for efficiency reasons.
Since the ...
- 403
2
votes
0
answers
294
views
How much entropy does Apple Touch ID sensor read fingerprint has?
Iphone uses by default 6-digit PIN that has an entropy of 19.93 bits
When iPhone processes the fingerprint, how much entropy does it have?
How long should standard passphrase be until it is as ...
- 31
5
votes
1
answer
250
views
How secure are Windows logins tied to physical human fingerprints?
Some business laptops have a fingerprint reader, and Windows has the ability to use your fingerprint to log into an account in lieu of a typed password.
I understand that these open up lines of ...
- 153
1
vote
0
answers
23
views
Security of Passwords vs Biometrics [duplicate]
Would a password with multi factor authentication be more secure than biometrics? I am asking due to the fact that if biometric data gets compromised, there is no way to change it, and in data ...
- 708
2
votes
1
answer
479
views
Why are pins required on boot on devices with fingerprint readers? [duplicate]
Both my iPad and my android phone are configured to allow access via either a pin, or a fingerprint scan. However, immediately after a reboot, neither device allows a fingerprint for the first unlock; ...
- 273
1
vote
0
answers
203
views
Disable Paste in Password field to use keystroke dynamics as 2FA
Paul Moore argues that one legitimate reason to disable paste in the password field (despite the downsides) is so that the server can use keystroke dynamics (behavioral biometrics) as a second form of ...
- 2,100
1
vote
2
answers
2k
views
How secure is the fingerprint sensor in the Pixel 3?
As far as I understand different fingerprint scanners have different security levels. Old fingerprint print scanners could be fooled quite easily as the CCC (Chaos Computer Club) demonstrated.
How ...
- 1,926
0
votes
1
answer
243
views
Does the device you are logging into count as one of the factors for MFA when you are using device biometrics? [duplicate]
Yes it does because
I 'have' the physical device
I 'am' the owner of the fingerprint
But no it doesn't because
1=>2 : If you have my device the fingerprint is now something you can get.
Which ...
- 131
9
votes
3
answers
2k
views
Plausibility of DNA sequence for encryption
To start with: This is in consideration of in-body implants.
The answer should (initially) assume there is no record of your DNA sequence mapped by a third party yet.
The question boils down to ...
- 181
1
vote
2
answers
6k
views
Combining a fingerprint scan and password for 2-factor-authentication [closed]
UPDATE:
I found the answer to the "How To?" part of my question on superuser:
Require Fingerprint AND Password/Pin for Windows Logon
Is it possible to require a TOTP on Windows Login using existing ...
- 111
3
votes
0
answers
346
views
How does biometric authentication work from a technical perspective?
Together with a colleague, we discussed the way of biometric authentication and how this works out.
Both of us are only interested in security but far from being an expert on the technical side. ...
- 31
2
votes
1
answer
154
views
What organizations have 1B faces to train a facial recognition neural network? [closed]
An article claims that a neural network was trained with over a billion images. Assume that the majority of images contain a face.
The infrared camera takes an image and the dot projector uses ...
- 1,531
6
votes
2
answers
2k
views
How safe is it to use Fingerprint-based authentication on unencrypted Android devices?
Since I needed root permissions for several apps on my Samsung Galaxy S8+ (SM-G955F) device, I followed a guide that showed how to install a superuser binary on the device's Android 7.
There was a ...
- 251
2
votes
2
answers
5k
views
Why fingerprint scanner doesn't work after reboot on Mi phones?
When I first experienced this I ignored it. But after some days I noticed that I had to unlock it by pattern lock or password everytime I restart the phone and after unlocking by pattern/password, I ...
- 177
0
votes
1
answer
179
views
What implementations of Biometrics Encryption exist now? [closed]
As I was studying a paper authored by Anna Romanou with title "The necessity of the implementation of Privacy by Design in sectors where data protection concerns arise" I came across Ann Cavoukian's ...
5
votes
1
answer
587
views
How identifiable is a caricature made from a photo?
I accept that to some degree this will depend on the software/exact processes used, but I'd like a general idea as to how "risky" it is, and get a better understanding of how biometrics simplifies ...
- 611
1
vote
1
answer
546
views
How reliable is using Fingerprint sensor (iPhone/Android) for identity approval?
What I'm trying to achieve is a confirmation of transaction (not payment) with a fingerprint sensor. Pretty much like Google does in its Play store:
Chose a product, click pay
Approve your choice ...
- 111