388
you are viewing a single comment's thread
view the rest of the comments
[-] ricecake@sh.itjust.works 6 points 7 months ago

While I do respect that viewpoint, there's a lot more independent scrutiny of the hardware modules than there are around the parts that would handle any other authentication mechanism you might use.

Pixel phone example iPhone example

Just because something isn't perfect doesn't mean we should keep using the less good thing that it replaces.

Use the PIN if that's more your cup of tea, just so long as you move away from passwords, since it's the HSM that's the protection, not the biometrics. Those are just to make it easier than passwords.

[-] Boozilla@lemmy.world 0 points 7 months ago

You can change PINs and passwords, but you cannot change your biometric data.

It's about as smart as using your SSN as your username.

[-] ricecake@sh.itjust.works 3 points 7 months ago

The point being that most people do not need to ever change their biometric data, because it isn't used for remote authentication.

It's about picking the right threat model, and for most people anything that gets them using the HSM is an improvement to their security.

this post was submitted on 28 Apr 2024
388 points (83.4% liked)

Technology

60062 readers
1360 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS