Re: Fingerprint technology vs. password complexity

From: x y, mvp (levinson_k@despammed.com)
Date: 03/27/03

  • Next message: x y, mvp: "Re: IP loss" 
    From: "x y, mvp" <levinson_k@despammed.com>
Date: Thu, 27 Mar 2003 12:17:47 -0500

    If you're looking for really secure authentication, note that there are some
    known vulnerabilities to both kinds of authentication. Potential drawbacks
    to biometrics include false positives [unauthorized people being allowed in]
    and false negatives [authorized people unable to log in], so that's one
    statistic to look for when considering a biometric solution. Also might
    consider statistics for length of time it takes to login and complexity for
    setting up a new user [I imagine you might need each one to come into the
    office where accounts are set up]. There were some articles a while ago
    about how someone was able to bypass such technology by making fake
    fingerprints and blowing on the sensor to heat the fingerprint oils from the
    last user.

    Depending on your security needs, it may be wise to also assign least
    necessary privileges to the accounts in case one is misused or compromised.

    "Marlon Brown" <marlon_brown@hotmail.com> wrote in message
    news:#F4DP#H9CHA.972@TK2MSFTNGP12.phx.gbl...
    > I work for an educational organization and we are considering buying
    digital
    > fingerprint authentication devices to let small kids logon to Win2K using
    > fingers instead of managing complex passwords.
    >
    > Any input on that and can you tell me drawbacks of using this technology ?
    >
    >

  • Next message: x y, mvp: "Re: IP loss"

    Relevant Pages

    • RE: Biometrics
      ... > Good point in bringing up potential security issues with biometrics. ... > compromised authentication does not allow access. ... Even then I would rule out fingerprint systems. ...
      (Security-Basics)
    • Re: Biometrics and AD
      ... Ted Zieglar ... > biometrics for _identification_ only (e.g. instead of me writing in ... > username -- computer figures it out from my fingerprint and e.g. doesn’t ... > for authentication (e.g. for authentication you could still use e.g. smart ...
      (microsoft.public.security)
    • RE: Biometrics
      ... Good point in bringing up potential security issues with biometrics. ... compromised authentication does not allow access. ... persons' fingerprint and successfully recreate it to log into a system ...
      (Security-Basics)
    • RE: Biometrics
      ... used fingerprint authentication as their biometric of choice. ... systems is that they all support multiple biometrics including multiple ... Subject: Biometrics ...
      (Security-Basics)
    • Re: Biometrics and AD
      ... username -- computer figures it out from my fingerprint and e.g. doesn’t ... give me any other option to provide PC with username) but not use biometrics ... for authentication (e.g. for authentication you could still use e.g. smart ...
      (microsoft.public.security)