Re: Biometrics (was Re: [fw-wiz] Username password VS hardware token plus PIN)

From: ArkanoiD (ark_at_eltex.net)
Date: 04/15/05

  • Next message: Devdas Bhagat: "Re: [fw-wiz] Out of Band management" 
    To: "Marcus J. Ranum" <mjr@ranum.com>
Date: Fri, 15 Apr 2005 12:12:21 +0400

    I did offer a solution: a special key that appears to work for a whle
    but informs other parties that there were some problems ;-)

    On Thu, Apr 14, 2005 at 09:21:24PM -0400, Marcus J. Ranum wrote:
    > Paul D. Robertson wrote:
    > >I don't think a wrist is that much more trouble than a finger to a
    > >machette
    >
    > I know you're just being funny, but this all misses an important
    > point: against an opponent that is willing to physically attack,
    > threaten, or torture you ALL authentication systems
    > are worthless. Especially if you assume a level of indirection
    > can be added (I.e.: "log me into the system or your child dies.")
    >
    > There's only so good it's worth making these things. My problem
    > with biometrics is that they're not even *that* good without a
    > heck of a lot of extra mechanisms and tweakage. Biometrics
    > are really only good if you, ummm.... sell biometrics.
    >
    > mjr.
    >
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    >
    > email protected and scanned by AdvascanTM - keeping email useful - www.advascan.com
    >
    >
    >

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Devdas Bhagat: "Re: [fw-wiz] Out of Band management"