Tag Info

New answers tagged

2

I think that there's an unstated assumption in the question: that the military installation will have a guard at the entry. Every attack on a biometric system I'm aware of assumes an unprotected or compromised scanner. If there's a guard standing there at the gate making sure that you're using your eyeball (not a gouged-out one, not a photograph, not a ...


4

I see you as having two questions here: Is the answer provided by the study guide technically correct? Is it possible this sample question doesn't have a clear answer and is a bad question? With regards to your first question I think you have a valid argument that smart card / PIN offers at least equivalent security to a biometric authenticator. But ...


-1

Some sources out there will disagree with the following statement but it has to be said. Biometrics are NOT authentication. Biometrics are IDENTIFICATION. Do NOT use biometric for authentication, but you can use them for identification just fine! There is 3 important concepts for security : Identification : Who you are Authentication : How you prove who ...


12

Biometrics can be effective as authentication or as identification, but not both at the same time. According to Wikipedia, retinal scans are accurate to approximately one in one million, meaning on the earth today there are approximately 7,000 individuals who will be identified as you in a retinal scan. Assuming no further authentication is necessary, ...


-1

It would be easier to defeat a smartcard and pin -- all you would have to do is use a pinhole camera to record your mark entering the pin and then steal their smartcard. Defeating a retinal scan requires fabricating some kind of device that can pass for a real human eye. Now think which would look more odd to a bored security guard watching the video feeds ...


1

The plugin gets the fingerprint from the scanner and encrypts it using a randomly generated 256 AES key and then encrypts this AES using the authentication server public key. Yeah... the big question is.... Where are you storing the server private key ? If its on a HSM then great. If not, then there's a nice weak link....



Top 50 recent answers are included