Windows 10: Microsoft makes biometrics focal point for Windows 10 security

Microsoft makes biometrics focal point for Windows 10 security

Source



:)

 

"The Weakest Link" - Windows Hello Weaknesses

Hi there,

Windows Hello was intended to make Windows more secure, but based on the information that I see, it doesn't. It seems like Windows Hello is only as secure as the "weakest link" of security, whether it is the Windows password, the biometric sensor, or the
Windows Hello PIN. Depending on how these security methods are configured, the weakest method could vary. If the Windows (or Microsoft) password is weak, then this method's lack of security makes Windows Hello pointless to implement. If someone doesn't enable
symbolic and alphanumeric PINs, then this method's level of security becomes the same as a weak password. The only way that the biometric sensor would make logins more secure is if it was the only login option. However, it doesn't seem like the other login
options can be disabled. Therefore, biometric sensors would only improve user login speed.

Am I correct on these observations, or am I missing a key detail?

 

Hello feature in Windows is not working

Hi Jaffrey,

Thank you for the update.

Hello works with a credential technology called Microsoft Passport that’s easier, more convenient, and more secure than using a password, because it uses "biometric authentication" that means you sign in with your face, iris, or fingerprint (or a PIN).

Devices with face sensors or fingerprint readers running Windows 10 will work with Windows Hello with the compatible and updated biometric drivers from your biometric device manufacturer that will make smooth operation. If their updated drivers
does not help, the same driver can be installed in Compatibility Mode.

Hope this helps.

 

Interesting,, thanks for post the link/article.

 

Fingerprints are WORSE than passwords. You can't change your fingerprint if it gets compromised....

 

But it would be harder to copy/duplicate a set of fingerprints than stealing a password. Well, unless you cut off a finger but that's not very likely to occur.

 

Not really. Consider ApplePay... you get mugged and they find you have a nice iPhone, and they force you to use the fingerprint reader to unlock the phone at gunpoint. They see your bank accounts are all in your phone.. ok, what's easiest? Hint, taking your finger is not a stretch...

However, that's not really my point. My point was about compromise. Suppose the mathematical data points of your biometric are stolen due to a flaw in the software, which hackers take advantage of.. They can now upload that data and pretend to be you... and there is no way you can change the password!

The issue is more around the fact that we do not have the technology to ensure your biometric data stays secure, while at the same time providing no alternative if it gets compromised. It's just a bad idea.

In other words, no thought has been put into place as to how to deal with flaws in biometric security, and the safety of the biometric data. It's like when someone had the bright idea to use facial recognition for paswords... hey, all I need is your picture and I can get into your stuff!

 

What if you don't have or want to use a biometrics computer system? I think it is a bad idea for moral reasons as well. I also agree with Mystere that it could be comprised. In the U.S. Yahoo accounts now force you to use a cell phone or not have an account with them.

 

"netplwiz" is one of the settings I change right after installation. So, this biometric thing is not for me. *Biggrin

 

I do that same and it works just fine for me.

 

This scene from "Reservoir Dogs" sums it up: [youtube]BEc0JLSeEu4[/youtube]

If it replaces passwords I'd say it will be highly likely that criminals will try cutting a finger off.

Biometric security is a contradiction in terms.

 

I think all y'all have been watching to many bad TV detective shows. *really

 

Regardless, I ain't agonna use fingerprint stuff. And I don't have bank info on my phone either. That's just plain not smart.

 

Lets see here
Touch screens and using a finger print security feature :/
I believe iphone's were already hacked with that option once not easy but has been done.

 

I don't see biometrics with good eyes !

Biometric Security Poses Huge Privacy Risks - Scientific American

*Smile