Hacker News new | ask | show | jobs
by LoSboccacc 4108 days ago
Simply put, for good authentication you want a token which is secret and easily changed.

Biometric data are not secret (face, fingerprints, voice) nor can be changed.

That means they are easy to forge and hard to revoke when compromised, and at most they can be useful as identification, like your email, and not as password.

I wonder why none thought of biometric identification with an hardware token which plays a one time tone outside audible spectrum. That would be incredibly convenient for users and still quite resilient. Just throw in side channel auth like phone message for unknown position or devices and of you go.