Slashdot Mirror
Biometrics: Prepare to be Scanned
npistentis writes "From an
article in the Economist: It has been a long time coming. But after years of false starts, security systems based on biometrics--human characteristics such as faces, hand shapes and fingerprints--are finally taking off. Proponents have long argued that because biometrics cannot be forgotten, like a password, or lost or stolen, like a key or an identity card, they are an ideal way to control access to computer networks, airport service-areas and bank vaults. But biometrics have not yet spread beyond such niche markets, for two main reasons. The first is the unease they can inspire among users. Many people would prefer not to have to submit their eyes for scanning in order to withdraw money from a cash dispenser. The second reason is cost: biometric systems are expensive compared with other security measures, such as passwords and personal identification numbers. So while biometrics may provide extra security, the costs currently outweigh the benefits in most cases."
I think they may be able to steal my finger with a big knife!
Here you'll be treated with dignity. Now strip naked and get on the probulator!
You can't take the sky from me...
With passwords, all they had to do is torture me, but with biometrics they just cut off my hand...
|>>?
I would have posted this under my own ID but I can't remember my password. -- CapnCarrot
In 50 years time we will have to give all kinds of bio information for everything, so we will carry a handy machine readable card with every bit of data on it to make it more convenient...
Thus defeating the entire purpose, and a stunning testament to human nature.
Beep beep.
would you like Windows to change your retinas now?
Creepy.
So let me get this straight, an industry expert whose job is to sell these things, thinks its premature, and we (americans as a whole) and our political representatives want to make these requirements? What happens when we found out there are errors, or exploits, its not like you can just reissue 100,000 visas, or maybe you can?
Having said that, if someone is taking my picture and storing it in a database, there should be a sign by the entrance warning people of that.
Something else from the link that I find disturbing:
In the wake of the terrorist attacks of September 11th 2001, however, these objections have been swept aside. After all, if you are already being forced to remove your shoes at the airport, and submit your laptop for explosives testing, surely you will not object to having your fingers scanned too?
I think this is really dangerous that every law that takes away civil liberties is linked to September 11th. And they give those laws such nice names, like "the patriot act".
American citizens will also be affected, as new passports with a chip that contains biometric data are issued from next year.
This is something that will be too easy to abuse. Remember, our government illegally bugged black panther offices, and did all sorts of illegal crap. I wonder if our government will use this kind of data to track private groups, such as those that protest the WTO. Could it be that if you show up to protest the WTO, then you will get audited by the IRS the next year?
Rosco: "If brains were gunpowder, Enos couldn't blow his nose."
Until there are social (legal and business) safeguards that require the verifier to discard my personal identity info once verified, this will be another false start to a real security model. A standard license that prohibits storage and transmission of my personal data beyond the limits of the verification transaction might be sufficient, if it had enforcement teeth. Where's a transactional security component whose documentation includes a license requiring interoperation with a law that protects the software user?
--
make install -not war
As has been mentioned before at many places and on this site a few times, but not in this article, bio metrics are great for ID but lousy for trusting. If any security device is compromised for a given user, e.g fake finger, fake face, fake eyeball, stolen tissue with DNA, stolen biometric data, that user cannot be revoked without locking out that user for life!
The article claims to address the authentication step, briefly mentioning "one-to-one comparison" but fails to define what that would mean for a given situation.
Bruce Schneier said it back 1998, and updated with application to airports.
"Do you want to look younger, loose weight or change password? Call your local cosmetic surgeon now!"
I'll be able to pick up a free case of pinkeye from the eye scanner at the local Wal-Mart. My life is complete
"So what happens when someone who has lost one or both eyes tries to withdraw money from their bank account?"
Well, that gives the mob/bookies/dealers/etc a real way to get you back. "Pay up or we'll take your eyes/fingers." Not only do you experience major pain/permanent disability, but you lose your identity and they can clean out your bank account.
GL
That'll be US$500k (with a US$50k/annum license fee), please.
Yeah, right.
So stick the fake thumb in your pocket for five minutes to warm it up to body temperature first. Probably that's what you'd do anyway - it would look pretty weird if you walked up to a bank machine with a rubber thumb in your hand or the brim of your hat...
What is the robbing of a bank, compared to the founding of a bank? -- Bertolt Brecht
While i really dont think biometrics is a good idea, enough torture will break you like it breaks ppl trained to resist it. Everyone has a breaking point. Maybe you'd tell your password if it meant they wouldn't burn your children alive. Sometimes it's not as easy as "choosing to die".
"If God created us in his own image we have more than reciprocated." - Voltaire
"Many people would prefer not to have to submit their eyes for scanning in order to withdraw money from a cash dispenser."
Pfffft whatever.
The reason I don't want to press my baby blues up against a retinal scanner is because I'm relatively sure a needle will pop out and pierce my eyes.
I don't think I'm alone in feeling this way.
Knunov
Why do users with IDs under 100,000 or over 700,000 usually have the most worthwhile comments?