[crote]

I remain very skeptical of fingerprints.

They are both too mutable (cuts and burns will alter them) and not mutable enough (you can't re-roll your fingerprints after a leak).

On top of that, you are also literally leaving them on everything you touch, making it trivial for anyone in your physical presence to steal them.

They are probably pretty decent for police use, but I don't believe they are a good replacement for current tech when it comes to remote auth.

[fc417fc802]

Biometrics are "something you are" but they are not a good substitute for either "something you have" or "something you know".

My concern with them nearly always comes down to privacy. They are far too easy to abuse for collecting and selling user data. There are probably ways around that but how much will you ever be able to trust an opaque black box that pinky promises to irreversibly and uniquely hash your biometric data? It's an issue of trust and transparency.