Hacker News new | ask | show | jobs
by withinboredom 1133 days ago
Isn't biometrics only on-device?
2 comments

It's "only on-device" as in the data isn't sent to MS servers (in theory).

According to ms's docs, depending on the sensor implementation, the OS might have access to that data:

https://learn.microsoft.com/en-us/windows/security/identity-...

> Some fingerprint sensors have the capability to complete matching on the fingerprint sensor module instead of in the OS. These sensors will store biometric data on the fingerprint module instead of in the database file.

So, knowing how most "enterprise" pcs get the cheapest possible implementation, I'd bet that in most cases windows stores the biometric data itself.

> I'd bet that in most cases windows stores the biometric data itself.

I suspect it is more likely the driver and Windows has no real visibility into it.

Can't Microsoft change the answer to that question whenever they please?