Passwords On The Way Out?

[ToraToraTora]

https://www.bbc.co.uk/news/business-49877317
I hope so it's right pain in the April at the moment.

[bednobs]

My very high security work is changing from having to change passwords every 4 weeks to keeping the same one of 3 randomly generated words

[Buenchico]

The alternatives to passwords are fine as long as they work. I made the mistake of only registering one fingerprint to access my smartphone and had no end of trouble when the phone suddenly decided that my fingerprint didn't match up. (I eventually gained access, allowing me to delete the dodgy fingerprint and then register four new ones).


>>> My very high security work is changing from having to change passwords every 4 weeks . . .

That's possibly not quite as secure as the password system used by rail staff to access the software which shows the locations and delays of every train in the country. After firstly entering the location code of the user and the fixed password that goes with it, there's then a second password needed, which changes every six minutes!

[ToraToraTora]

i had a similar problem when I burnt my finger print finger!

[douglas9401]

Seems odd that folk are happy to upload and have stored biometric data to a completely shambolic system, proven to be hackable, but dig their heels in at the mention of an ID card.

[ToraToraTora]

how does an ID card help with access to IT?

[douglas9401]

It doesn't, I mean the principle of info held on a person.

[ToraToraTora]

no system is 100%, storing fingerprints etc is no worse than storing passwords and it's much more difficult to fabricate finger prints. It's also much more convenient for the user.

[douglas9401]

Righto, end of, etc.

[Old_Geezer]

Not getting biometrics from me. Such personal data collection is too much to be available to industry or government. Passwords ain't so bad. Store them in a password keeper. If there needs to be a better system it seems no one has applied sufficient thought to it yet. If one can't reset a security aspect then one can't change it, and woe betide you if someone finds out how to mimic that unchanging thing related to you.

[Old_Geezer]

Who the heck realises the problems of ID cards and subsequent data bases and yet are happy to upload and have stored biometric data to a completely shambolic system, proven to be hackable ? The overlapping bit on the Venn diagram must be vanishingly small.

[ToraToraTora]

OG the problem with passwords is how they are stored at the other end. Eg facebook were discovered to have been storing them un encrypted and lost several hundred thousand. With fingerprints they can store encrypted as now with passwords but unless a villain chops your finger off it's very difficult to fake. I'd have thought you'd have been enthusiastic. Your PW keeper is very unsafe, a hacker needs only to crack one PW and he's got the lot.

[Old_Geezer]

Got to get hold of it first and then crack it.

Fingerprints are taken from criminals not free citizens. They are known to go wrong. Plus one hears stories of getting a print off a glass and recreating with glue to fool tech. It's a wrong turn down a dead end path. Anyway, how'd you feel about someone hacking off your finger to get to your stuff ?

[ToraToraTora]

I confess I'd rather not have my finger hacked off. Yes fingerprints are not foolproof, I'd just find them more convenient and at least as safe as passwords.