Hacker News new | ask | show | jobs
by acdha 3526 days ago
The flip side is that entering a strong password is tedious and incentivizes people to use shorter, easier to type passwords or disable / increase the time delay for things like their screensaver locks.

That means that the question is really whether Touch ID is more secure than the passwords which people will actually use in practice. As criddell noted, how you answer that is going to come down to threat models and resources. Biometrics really put you into some pretty different trade-offs: e.g. a camera can record you typing in your password but not your fingerprint, but someone can force you to touch the sensor or maybe pull it off of a glass, a password can be faked safely while someone watches you but that fake fingerprint is much riskier, etc.