Obviously biometric security is a hot-button topic. I happen to attend a university with a well known biometrics department. (Which I'm not a part of.)
My problem is, biometrics has a large caveat: it can't be changed.
Once my fingerprint has been compromised, it is no longer useful as a security measure. Realistically, we each leave fingerprints everywhere.
Now at the current time, people aren't out in droves stealing fingerprints. Arguably, however, it is not yet profitable to do so.
With advances in general technology, researchers have successfully stolen fingerprints using a high-resolution camera:PCMag Article
Theoretically that idea could be expanded to retina scans as well. (3-D printing, anyone?)
Even a heartbeat detection system would need changed if the user experienced a cardiac event.
So then, my question is: Do standalone biometrics have a place in security?
If a database is compromised with some sort of hash of my fingerprints, what am I supposed to do for every other place they are in use? It just seems like a major flaw.