New answers tagged biometrics
Probabilistic or statistical authentication are probably the best fit, the alternative to deterministic authentication. (Though technically, there's a degree of probability involved when password hashes are used, rather than plaintext passwords, let's just ignore that for now.) Biometric implies a probabilistic system, but the converse is not true, e.g. ...
Depending on metrics such as the false acceptance rate and the false rejection rate of your authentication system, you can set a similarity percentage for which your biometric authentication is acceptable. Also, I don't think you can speak of passwords regarding voice authentication because it relies on an inherence factor as you can see on Wikipedia.
It really depends on the level of precision used by the biometric authentication system. Too precise, and it will trigger false rejections; too lax, and it allows other people to log in as you. The basic method to authenticate a fingerprint uses pattern recognition, example: followed by defining the centre of the main pattern, and tracking the relative ...
Your question can be summarized in few words: I have someone's fingerprint, can I impersonate him and authenticate into a biometric system? In my opinion you can NOT, I have never dealt with such systems but it cant be that easy to bypass them or the security world would be in total chaos as you can find fingerprints of high profile individuals everywhere. ...
Your fingerprint is left on every space your hand has touched, so it is not something secret as you may think of like a password. For remote access, you can't rely only on biometric for the authentication, as contrary to onsite access where we have the ability to recognize the person when he uses a service or a device.
Your question doesn't actually list the main security problems with biometrics, and the reason that they aren't actually used to secure anything valuable except as an additional mechanism after your normal 2 factors. 1) Biometric signatures are not unique You can comfortably assume there are many people out there with fingerprints that will match yours to ...
The security of a biometric authentication system depends on the physical security of the input device. If the attacker has physical control of the input device, they can bypass it by inputting a stolen hash directly; if the device is unmonitored, the attacker can use a fake finger/eye/whatever to input stolen biometric data.
Now I hack the server and steal the hash. Now I can bypass the fingerprint test. No, your reasoning is not correct: we can not bypass the authentication mechanism by simply having the hash (of the fingerprint) because introducing the hash to the machine will produce an other hash different from the one that resides on the server. In other words: ...
If you don't log with a password, but instead with a fingerprint, then DPAPI plays an elaborate charade of encrypting keys with other keys, but the tower of encryptions must still end at some point. So what really happens in that case is that someone who steals your laptop will be able to extract all your secrets -- albeit with a substantial amount of ...
Top 50 recent answers are included