Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [biometrics]

Biometrics is a set of methods related to unique identification of people based on physiological or behavioural traits

2
votes
1answer
147 views

Why are pins required on boot on devices with fingerprint readers? [duplicate]

Both my iPad and my android phone are configured to allow access via either a pin, or a fingerprint scan. However, immediately after a reboot, neither device allows a fingerprint for the first unlock; ...
1
vote
1answer
133 views

Transforming keystroke dynamics raw data

I'm writing keystoke dynamics identifcation as an assignment and I'm having trouble with storing data. I was instructed only to "don't keep raw data" as it should've been transformed. I wasn't told ...
1
vote
0answers
53 views

Disable Paste in Password field to use keystroke dynamics as 2FA

Paul Moore argues that one legitimate reason to disable paste in the password field (despite the downsides) is so that the server can use keystroke dynamics (behavioral biometrics) as a second form of ...
1
vote
2answers
192 views

How secure is the fingerprint sensor in the Pixel 3?

As far as I understand different fingerprint scanners have different security levels. Old fingerprint print scanners could be fooled quite easily as the CCC (Chaos Computer Club) demonstrated. How ...
0
votes
1answer
93 views

Does the device you are logging into count as one of the factors for MFA when you are using device biometrics? [duplicate]

Yes it does because I 'have' the physical device I 'am' the owner of the fingerprint But no it doesn't because 1=>2 : If you have my device the fingerprint is now something you can get. Which ...
8
votes
3answers
2k views

Plausibility of DNA sequence for encryption

To start with: This is in consideration of in-body implants. The answer should (initially) assume there is no record of your DNA sequence mapped by a third party yet. The question boils down to ...
1
vote
2answers
659 views

Combining a fingerprint scan and password for 2-factor-authentication [closed]

UPDATE: I found the answer to the "How To?" part of my question on superuser: Require Fingerprint AND Password/Pin for Windows Logon Is it possible to require a TOTP on Windows Login using existing ...
2
votes
0answers
108 views

How does biometric authentication work from a technical perspective?

Together with a colleague, we discussed the way of biometric authentication and how this works out. Both of us are only interested in security but far from being an expert on the technical side. ...
1
vote
1answer
94 views

What organizations have 1B faces to train a facial recognition neural network? [closed]

An article claims that a neural network was trained with over a billion images. Assume that the majority of images contain a face. The infrared camera takes an image and the dot projector uses ...
5
votes
1answer
746 views

How safe is it to use Fingerprint-based authentication on unencrypted Android devices?

Since I needed root permissions for several apps on my Samsung Galaxy S8+ (SM-G955F) device, I followed a guide that showed how to install a superuser binary on the device's Android 7. There was a ...
0
votes
1answer
487 views

Why fingerprint scanner doesn't work after reboot on Mi phones?

When I first experienced this I ignored it. But after some days I noticed that I have to unlock it by pattern lock or password everytime I restart the phone. After unlocking by pattern/password, I was ...
0
votes
1answer
87 views

What implementations of Biometrics Encryption exist now? [closed]

As I was studying a paper authored by Anna Romanou with title "The necessity of the implementation of Privacy by Design in sectors where data protection concerns arise" I came across Ann Cavoukian's ...
4
votes
1answer
360 views

How identifiable is a caricature made from a photo?

I accept that to some degree this will depend on the software/exact processes used, but I'd like a general idea as to how "risky" it is, and get a better understanding of how biometrics simplifies ...
1
vote
1answer
334 views

How reliable is using Fingerprint sensor (iPhone/Android) for identity approval?

What I'm trying to achieve is a confirmation of transaction (not payment) with a fingerprint sensor. Pretty much like Google does in its Play store: Chose a product, click pay Approve your choice ...
4
votes
1answer
133 views

What prevents recorded voice samples being used for authentication on other systems?

What technical measures are used to prevent recorded voice samples from being used for authentication on voice recognition/id systems? A client wanted to simplify user logins and mentioned the ATO as ...
0
votes
1answer
768 views

How much more secure is fingerprint compared to text passwords? [duplicate]

Mathematically, how much more secure is fingerprint compared to textual passwords? Like is there any detailed mathematical analysis?
8
votes
5answers
2k views

Hardware token vs Fingerprint based software token

I'm given a choice between two banks's authentication procedures and I need help choosing the most secure and convenient option. Option "hardware token": Authentication into the web platform is done ...
-1
votes
2answers
253 views

Authentication under the constraints: only public information [closed]

What are some systems of identity verification that fits these sort of constraints: Doesn't require the subject know a specific piece of information (e.g. always know a password or birthday) The ...
-1
votes
1answer
267 views

How does reducing the False Match Rate (FMR) in a biometric system can cause human factor vulnerabilities? [closed]

How is this vulnerability possible? How is FMR linked with human factor vulnerabiltiy? If there is a vulnerability what are ways to safeguard or mitigate such issues?
1
vote
1answer
57 views

Is it possible to save scanned biometrics and use it later

I provided my identity using biometrics for getting a SIM card. Is it possible for this Point-of-Sale guy to save my data and use it later for getting some more SIM cards without my knowledge? If ...
2
votes
2answers
291 views

False acceptance rate in biometric authentication for sensitive information

Every type of biometric authentication will have a false acceptance rate, which is the likelihood that the system will incorrectly accept an access attempt by an unauthorized user. Of course, when ...
5
votes
2answers
807 views

Face ID vs Touch ID [duplicate]

While unveiling iPhone X, Apple made a statement to this end: With Touch ID, it stated that there was a 1 in 50,000 chance that someone would be able to open your phone with their fingerprint. ...
9
votes
1answer
568 views

Is Apple Face ID a good security feature?

This paper demonstrates how face liveness detection could be easily defeated by virtual models built from your public photos. If you consider the instagram/snapchat phenomenon where users post ...
0
votes
1answer
125 views

Biometric Match Threshold

I'm a beginner to security, and I had a question about biometric match thresholds. Does a higher threshold signify that the system follows a strict(er) policy? Also, suppose I have a threshold of 0.5; ...
2
votes
0answers
46 views

Native Mobile App Finger Print Authentication and web service.

I have developed many web based applications and focused a lot on authentication LDAP, SAML and in application passwords. Now I am moving to building native mobile application and would like to take ...
3
votes
1answer
2k views

What are the security risks of USB fingerprint scanners in Windows 10?

Hi I have a Lenovo laptop encrypted with Bitlocker, which I also use a fingerprint scanner with. Bear in mind I'm not working with super-secure information, more the level that a developer/manager for ...
0
votes
1answer
67 views

Is signature an universal biometric trait? [closed]

Where "universal" stands for "The trait must be owned by any person (except for rare exceptions ...)"? (Notice: this is a question related to biometric systems, hopefully this is the right ...
3
votes
1answer
897 views

How safe is Voice Recognition ID?

Recently I saw this advert for HSBC mobile banking app which has me a little worried. In the advert the actor logs into his online banking using "Voice Id" (essentially say a secret password and hey ...
11
votes
2answers
1k views

Is using Touch ID with FileVault full disk encryption secure?

I recently purchased a Macbook Pro (late 2016) which now includes Touch ID, like the iPhones have been for a while. Although this is a very convenient addition, I am wondering how this affects the ...
3
votes
3answers
96 views

Would biometrics be more secure if it was a sequence and not a single biometric scan?

I was looking at this question How is Fingerprint Authentication Secure? Where it talks about biometric scans, and the answer by @Lie Ryan mentions this isn't a secure authentication method, but more ...
6
votes
1answer
2k views

How is Fingerprint Authentication Secure?

Lately, biometrics are being used for identity verification everywhere. e-Visas, Passports and even bank transactions (UUIDAI Aadhar system in India is now being used for identity verification, micro-...
4
votes
2answers
264 views

Security of the Indian AadhaarPay fingerprint based payment system?

India recently launched a payment system where merchants install an app on an Android phone, and connects a fingerprint reader it. Clients provide their Aadhaar number (like a national identity ...
0
votes
0answers
80 views

Plotting EER biometric gait sensor graph

I am trying to plot the Equal Error Rate (EER) for gait from sensor. I have tried to understand how to draw the EER curve but I am not sure what to do. I would like someone to please explain to me in ...
1
vote
2answers
1k views

Do Apple and Samsung collect user's biometric data?

Since Apple uses fingerprints to download apps from the App Store, I'm wondering if they are collecting our biometric data. If so, I want to know if they hash that data? One day, if the US ...
53
votes
8answers
21k views

How Secure is a Fingerprint Sensor Versus a Standard Password?

According to Apple, Touch ID the probability of a fingerprint matching is 1:50000 while the probability of guessing a four digit passcode is 1:10000. Statistically speaking, this would make Touch ID ...
5
votes
1answer
154 views

Should I blur my fingerprint when I share a picture/scan of a document containing it?

When I share a picture or scan of some document containing my fingerprints, should I blur it? Or is it useless as pictures of fingerprints are of too low resolution to reproduce the original, unique ...
0
votes
4answers
105 views

Would allowing the user to login via a set of IPs with face recognition be a secure enough alternative?

I'm trying to figure out how face recognition would be considered a valid and secure enough option of logging into an account. The way how I see this works is as followed, the user logs into their ...
5
votes
3answers
487 views

How secure is using your fingerprint for password against opportunist thieves?

If someone has access to your fingerprints then using your finger print as a password on your phone or other device is obviously compromised. But assuming they do not have access to your finger prints,...
1
vote
1answer
136 views

Can fingerprints read from scanner by a malicious party be used for incrimination?

Assume that: I have submitted my fingerprints to a scanner at an office building for "security clearance" at the gate. The scanner was feeding the fingerprint data to a malicious third party that ...
2
votes
1answer
507 views

How the 'probability of verification' is inversely related to the 'false accept rate'?

I was reading a document discussing biometrics and came across this statement: Typical finger-print verification systems employed by FBI achieve 90% probability of verification at 1% false accept ...
0
votes
2answers
606 views

What are the technical specifications for the Apple iPhone 7 fingerprint reader?

I'm looking for technical material that describes the quality of the iPhone 7 fingerprint reader, and ideally previous models as well. My hope, is that the specification is more in alignment with ...
10
votes
1answer
2k views

How secure is Windows Hello when used with Intel 3D facial recognition?

Windows 10 mobile devices, Surface Laptops, and several other 3rd parties integrate an Intel Realsense 3D camera. Windows Hello extends this 3D camera to support user authentication. What ...
1
vote
2answers
263 views

When to use only biometric authentication?

I have seen a variety of banks allowing access to their remote banking environment with just your fingerprint (via iphones and similar devices). Are these valid examples of a wider group of cases ...
74
votes
6answers
15k views

Is face recognition a good security feature?

I found that this guy uploaded some face recognition code with a comment that he'd like to use it "as a security feature". This got me thinking; is face recognition a valid security feature, or is it "...
9
votes
2answers
3k views

Why do smartphones limit the amount of fingerprints that can be recorded?

On my Android device, I can store up to 3 fingerprints to unlock my phone with the fingerprint scanner that is built in to the home button. On iPhones it's 5 fingerprints if I'm not mistaken. But most ...
2
votes
2answers
203 views

Accuracy of Iris Biometric Authentication

I understand that the iris is the most accurate biometric modality since it has a false acceptance rate of about 1 in 1,000,000. Fingerprint on the other had is about 1 in 1000. These error rates ...
1
vote
1answer
94 views

Biometrics for screen locks vs encryption

I've always argued that, while biometrics can be a step in the right direction for basic passwords/hashing setups like computer or phone lock screens, especially when combined with multi-factor ...
3
votes
1answer
349 views

What are the NIST/FBI requirements for Fingerprint readers, and Iris scans?

Background I'm trying to locate the US government standard for fingerprint readers and mobile devices. I heard in passing that the iOS fingerprint reader only scans 9 points, where the FBI ...
18
votes
4answers
3k views

Voice Biometrics for financial authentication

From this article: http://www.bbc.com/news/business-36762962 Apparently, it takes us 45 seconds on average just to confirm who we are. But by using computers to identify our voices, this ...
1
vote
2answers
725 views

Remote Biometric Authentication using mobile phones

As Google endeavours to do away with passwords, biometrics authentication as a method of proving identity has gained popularity. Logging into a system using a fingerprint or other biometric data would ...