Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

8/12/2014
03:25 PM
Marilyn Cohodas
Marilyn Cohodas
Slideshows
Connect Directly
Twitter
LinkedIn
RSS
E-Mail

6 Biometric Factors That Are Working Today

From fingerprints to wearable ECG monitors, there are real options in the market that may relegate the despised password to the dustbin of history.
2 of 7

Fingerprint

Craig Federighi, Apples senior vice president of software engineering, told developers at the WordWide Developer Conference this past June that since the introduction of TouchID in the iPhone in 2013, 83 percent of iPhone 5S owners use a TouchID fingerprint passcode to secure their devices. Thats up from less than half of iPhone owners who used a passcode in the pre-TouchID era.

The reason: TouchID is easy to use and impossible to forget. The results: Millions of iPhone owners (and, presumably, users of Samsung Galaxy S5, which arrived on the scene with a fingerprint scanner in April) are protected if their phones are lost or stolen, as is the personal, identifiable information contained in the devices.

With iOS8, iPhone users will have even more options for fingerprint authentication as developers roll out the first generation of third-party apps that can call out to TouchID.

2 of 7
Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
Page 1 / 3   >   >>
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
8/27/2014 | 7:09:31 AM
Re: correct me if I'm wrong
It could be a combo of the "good old fashioned" password with a biometric for a while. But I still believe the future is with biometrics... especially as these factors become more common and accepted. 
Bprince
50%
50%
Bprince,
User Rank: Ninja
8/27/2014 | 12:14:47 AM
Re: correct me if I'm wrong
I still believe in the good old fashion password, but I would like to see retina scanners used. Not like Minority Report exactly, but I think as an authentication measure I find it fascinating. 

BP
Robert McDougal
100%
0%
Robert McDougal,
User Rank: Ninja
8/18/2014 | 8:10:49 AM
Re: correct me if I'm wrong
CardicRythm is pretty close, but you are right it requires that "intrusive" wearable bracelet.  I am hoping for sensors so sensitive they can detect the minute electrical fields surrounding us all.

Yeah, I am a big nerd.....
Marilyn Cohodas
0%
100%
Marilyn Cohodas,
User Rank: Strategist
8/18/2014 | 7:33:44 AM
Re: correct me if I'm wrong
Isn't that how Cardiac Rhythm works? That sounds like a pretty cool and promising biometric, although it sounds like it would require a wearable bracelet of some sort, which some people might find intrustive. (sigh)  No perfect solution. But we can't let perfect be the enemy of good!
MarilynCoh
50%
50%
MarilynCoh,
User Rank: Apprentice
8/16/2014 | 1:02:54 PM
Re: correct me if I'm wrong
Ok. I concede that there is a lot of skepticism about fingerprints -- legitimate or not. But what about some of the other types? Eye, Palm, behavioral? Does any one agree with me that some type of biometric is preferable to passwords?
Robert McDougal
50%
50%
Robert McDougal,
User Rank: Ninja
8/16/2014 | 10:20:02 AM
Re: correct me if I'm wrong
Call me paranoid, but I don't like fingerprint authentication.  It could be because of all of those James Bond movies but I see my fingerprint as a liability.

Let's say that someone wants to authenticate as me.  They follow me to starbucks where I proceed to buy an Venti White Mocha =), which I consume in the store.  I throw my empty container in the trash and leave.  The attacke walks over to the trash pulls out my empty container and now they have my fingerprint.
Robert McDougal
50%
50%
Robert McDougal,
User Rank: Ninja
8/16/2014 | 10:16:55 AM
Re: correct me if I'm wrong
If we use DNA, what about twins?
Robert McDougal
50%
50%
Robert McDougal,
User Rank: Ninja
8/16/2014 | 10:15:37 AM
Re: correct me if I'm wrong
Call me Mr. Sci-Fi but I would like to see authentication based on a persons unique electrical field.  Walk up to a device it detects the faint electrical field surrounding you and grants you access.
bpaddock
50%
50%
bpaddock,
User Rank: Strategist
8/15/2014 | 12:46:16 PM
Re: correct me if I'm wrong
For a short time period cars sold in Japan had fingerprint scanners in place of the door locks.  That technology rapidly went back to keys when thugs started cutting off fingers to steal the cars.

Show me a biometric scanner, such as one based on the eye, that will authenticate you after you've been hit in the face by an airbag in a car accident.  Airbags are *not* big fluffy pillows when you are going 50+ MPH.  How happy will you be that you can't call your family for help because your phone things they injured you, is not you?

 

 

 
bpaddock
50%
50%
bpaddock,
User Rank: Strategist
8/15/2014 | 12:46:06 PM
Re: correct me if I'm wrong
For a short time period cars sold in Japan had fingerprint scanners in place of the door locks.  That technology rapidly went back to keys when thugs started cutting off fingers to steal the cars.

Show me a biometric scanner, such as one based on the eye, that will authenticate you after you've been hit in the face by an airbag in a car accident.  Airbags are *not* big fluffy pillows when you are going 50+ MPH.  How happy will you be that you can't call your family for help because your phone things they injured you, is not you?

 

 

 
Page 1 / 3   >   >>
COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/1/2020
9 Tips to Prepare for the Future of Cloud & Network Security
Kelly Sheridan, Staff Editor, Dark Reading,  9/28/2020
Attacker Dwell Time: Ransomware's Most Important Metric
Ricardo Villadiego, Founder and CEO of Lumu,  9/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-5788
PUBLISHED: 2020-10-01
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action.
CVE-2020-5789
PUBLISHED: 2020-10-01
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.
CVE-2020-9486
PUBLISHED: 2020-10-01
In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.
CVE-2020-9487
PUBLISHED: 2020-10-01
In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens, ...
CVE-2020-9491
PUBLISHED: 2020-10-01
In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues...