[heffo]

That's the same reasoning for text passwords, yet there are huge password dumps every year.

It only takes one place where security standards aren't implemented properly to have your print leaked forever.

Never mind a malicious user managing to alter the code to leak the print before it's hashed.

Or even someone physically accosting you and retrieving a brain scan. They could do the same thing and force you to give up a password, but at least the password you can change later on.

[JoshTriplett]

> Or even someone physically accosting you and retrieving a brain scan. They could do the same thing and force you to give up a password, but at least the password you can change later on.

For that matter, a password is always your choice to reveal or not, taking the cost and alternative into account. Biometric information isn't.

[SEJeff]

Or messing with the RNG so that the salt isn't actually random. That would never happen :)