top | item 40651178

(no title)

autorizo | 1 year ago

You nailed it, we should not use public data for important things like this that could result in fraud.

discuss

order

drdaeman|1 year ago

Totally! Like I said - biometrics is a very bad idea for anything actually sensitive. I wouldn't let my door lock open upon seeing my face - high convenience but high risk. But I don't mind a PAM module on a non-portable desktop computer that would let me passwordless sudo when camera sees me - low risk, high convenience.

And if some credit organization or airport security says they're fine with using it - I see this as their risks, not mine. And giving them my biometrics isn't hurting me because I won't use it for anything I care about. Unless, of course, I'll be forced to, somehow - but I doubt that's likely.

I see MasterCard doing this as they estimated a risk-to-profit factor to be satisfactorily low. My overall impression of banking/finance industry is that they're very different when it comes to security - they tend to have what we'd call poor security practices, but they compensate this by taking responsibility for when things fail, swallowing the losses (cheaper than upgrading everyone and everything) and just making sure they earn more than they lose. It's more prominent in US (where half of the industry relies on knowing last four of secret SSN number that you have to share-not-share with a lot of companies, and some very "secret" questions like my birthday - and the economy still works somehow!) than in EU, though.