• BorgDrone@lemmy.one
      link
      fedilink
      English
      arrow-up
      32
      arrow-down
      1
      ·
      edit-2
      1 year ago

      As with all things security, it depends entirely on your thread model and the value of what you’re trying to protect.

      Biometrics can be a much more secure option than using a PIN or password, depending in circumstances.

      For example: when I’m working on my laptop on the train or in a coffee shop and I need to log into some website I’d rather use my fingerprint to unlock the passkey than type in a password in a public place where I have no idea who is observing me entering my password.

      Same goes for paying with your phone, you can either enter your phone PIN in a crowded supermarket or you unlock with FaceID.

      Also, for phones, for a lot of people the alternative to biometrics wouldn’t be a PIN, it would be no authentication whatsoever. Biometrics lowers the barrier to having a form of authentication at all.

      • Saik0@lemmy.saik0.com
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        6
        ·
        1 year ago

        for a lot of people the alternative to biometrics

        Full password Android user representing here… It’s surprising how few people bother to even stop any amount of snooping on their phones. but I guess it’s only surprising in that I wished more from society in general.

      • seaQueue@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        4
        ·
        1 year ago

        Biometrics can be spoofed, or the body part stolen in extreme cases.

        Also, in the US at least, biometrics aren’t protected by the same rights that allow you to not incriminate yourself. IIRC they’re considered a thing you have, which you can be compelled to surrender or use to unlock a device, vs something you know (like a password or pattern) which you can withhold if it would be incriminating. Check with a lawyer on this one, I haven’t paid attention to the case law here for a bit.

        • Squeak@lemmy.world
          link
          fedilink
          English
          arrow-up
          23
          arrow-down
          3
          ·
          edit-2
          1 year ago

          If someone is stealing my body parts, what they access on my devices is the least of my worries!

          • wmassingham@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            2
            ·
            1 year ago

            They don’t have to be stolen. Imagine some clever thief drugging your drink, then when you’re incapacitated they take your phone and press your finger to it or hold it up to your face to unlock it, then transfer all your money out of Venmo or whatever money transfer app you have on your phone.

            • Squeak@lemmy.world
              link
              fedilink
              English
              arrow-up
              7
              arrow-down
              1
              ·
              1 year ago

              The comment I replied to said stolen, which is what I was getting at.

              There’s also nothing to stop someone watching over your shoulder to see your PIN for your phone/laptop. Nothing is infallible.

            • jimbo@lemmy.world
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              5
              ·
              1 year ago

              God, the shit people dream up to worry themselves about. Nobody is drugging you to unlock your phone.

          • Imgonnatrythis@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            1 year ago

            Really? Would be up there for me. Sucks to miss a finger or eyeball, but if they’ve also drained my bank account and my credit card - I’m going to be even more pissed for sure.