Re: replacing compromised biometric authenticators

2017-10-13 Thread Jörg Kost
Hi, in the case I mentioned, the datacenter provider (=Level3) removed hand geometry scanners from its facility and switched all users to card + pin. Also the provider is going to run this policy Germany- or even Europe-wide, as being told by Level3 account rep. The mentioned facility does n

Re: replacing compromised biometric authenticators

2017-10-13 Thread Alain Hebert
    Odd,     1. captcha(?)     In my millennia of experience I never saw a captcha used as a mean for DC access control.  Just as a programmatic way to reduce brute force for some website functions.     On my network janitor keychain I have (in order of hackability from easiest to hardest)

Re: replacing compromised biometric authenticators

2017-10-12 Thread Jean-Francois Mezei
On 2017-10-12 16:58, Rich Kulawiec wrote: > (3) because they facilitate coerced risk transference away from the > people who are actually responsible (and are paid to be so) to the > people who shouldn't be responsible (and aren't paid to be) I think biometrics are seen as a means to reduce the

Re: replacing compromised biometric authenticators

2017-10-12 Thread Rich Kulawiec
On Wed, Oct 11, 2017 at 05:04:08PM -0400, Ken Chase wrote: > If the current best operating practice is to avoid biometrics, why are they > still in use out here? (1) for the same reason some idiots still use captchas (2) new hotness > old and busted, regardless of merits (3) because they facilita

Re: replacing compromised biometric authenticators

2017-10-11 Thread Wayne Bouchard
I agree that multiple levels are best and, for the moment, I'd frankly be hesitant to give anything like finger print data since one can never change that and the harm of it getting loose can not yet be determined. (Not that the data being taken by these scanners is necessarily all that grandiose.)

Re: replacing compromised biometric authenticators

2017-10-11 Thread Matt Harris
I would definitely not say that it is current best practice not to deploy biometrics. As part of a holistic approach, biometric systems can improve security greatly. As a singular approach, using it as a single factor for authentication and authorization of access/actions, it's as terrible an ide

Re: replacing compromised biometric authenticators

2017-10-11 Thread Andrew Kirch
Since I'm not squeamish about such things, I do have tin snips and will happily assist in revocation of compromised biometric authentication factors. Andrew On Wed, Oct 11, 2017 at 5:04 PM, Ken Chase wrote: > (forking the thread here..) > > Biometrics are still the new hotness out in North Amer

replacing compromised biometric authenticators

2017-10-11 Thread Ken Chase
(forking the thread here..) Biometrics are still the new hotness out in North America. Cologix whom I deal with in Canada has a dozen and a half odd POPs in canada/usa and I think has fingerprinting at all sites. If the current best operating practice is to avoid biometrics, why are they still in