People in the cybersecurity business keep saying that a password is dreadfully insecure, that someone can look over your shoulder and steal it, or they can listen to your communication with the bank, and steal it from that. There can be malware on your device, which reads what you type, and sends it a cybercriminal in another country. Even strong encryption is no use, since criminals now use GPU's to decrypt millions of credentials in just a few milliseconds.
But passwords are so convenient. Why would you want your iris scanned in the checkout queue at Target, or wait for an SMS message, telling you to enter yet another password? Most importantly, if you lose or forget your password, it can be reset, unlike any biometric parameter.
It would be most convenient, if you could enter your password in the usual way, but anyone watching would be unable to use what they saw, and anything listening to the (unencrypted) transmission would pick up useless garbage. Even better, if any malware on your device would also be unable to use anything it discovered.
This paper sheds light on this problem.
https://www.researchgate.net/project/IDaaS-with-secure-data-at-rest/update/5a94e4f1b53d2f0bba5491cf
.
In case the reading is too heavy, here's a first-hand example of how it looks in practice:
www.designsim.com.au
In Cyber security business alone with password is dreadfully insecuredbut along with biometric such as it is and fingerprint is much more secure.However remember no security level is ever 100% secure.
Take a note on this Research Proposal. Thanks
https://www.researchgate.net/publication/326681273_BIOMETRICS_THE_FUTURE_OF_BANKING_AND_FINANCIAL_SERVICE_INDUSTRY_IN_NIGERIA
That's only one third of the story. We use 3FA.
Biometric authentication is not more secure. Not only is it userID/password all in one, but it is digitised data, and very vulnerable to being intercepted, logged and reused in replay attacks. Also....
In 2014 an FBI agent lost his laptop. As a result, the FBI lost its entire biometrics database, which also included data for several hundred CIA agents. Now they can be identified by several less-than-friendly governments. Since they couldn't replace their fingerprints/iris scans. the FBI went back to ... passwords.
- Badges
- Science topic