
has their fingerprint "credentials" already stored at the State and/or Federal level. Anyone backing up your devices with fingerprint "credentials" may have the same type of info stored.Īnyone who has ever gained a Federal security clearance, worked or volunteered in education (at least in California), worked in kids church (at any church that doesn't want to be sued for lack of background checking workers), obtained a firearms permit (fingerprint/background check required everywhere I've applied), etc. People are concerned with Google having all your Wifi passwords. We welcome your comments in our discussion forum (comment button below).

If Apple would implement a "fingerprint + PIN" two factor authentication solution, it'd be an easier decision. So, am I using my fingerprints yet? Not on any of my laptops, but once I upgrade my 4S to the new model, it'll be awfully tempting to take the plunge - I guess I'm still thinking about it. What's changed is that there are way more phones than there are laptops, and in most cases the 4 digit unlock code on your phone is all that protects your chequing account, your facebook, paypal, twitter and email accounts. There's lots of discussion on this online, I think we're still waiting on Apple to respond definitively on any of them.Īnyway, none of these arguments are new, we've been round and round on them anytime these last 10 years, since they started putting readers on laptops for login. Since your phone code likely matches either your phone number or your bank code, either it's very easy to guess, or compromising it might have other unpleasent consequences for you. On any given day, using your fingerprint is likely MUCH more secure for you than the 4 digit code you are likely using

If your phone is damaged, you may not have a way of wiping it Historically, your phone's backups have been easier to pillage than your phone. Your fingerprint may be backed up with your phone backup. Again, once stolen, they are stolen forever.Īfter a couple of years, you'll likely trade your phone in for a new one, and today there isn't a way to know that a wipe of the phone wipes the saved representation of your fingerprint So if the device is lost or stolen, this representation could be used to compromise other things, if they use the same representation of your fingerprint (ie - any other device that uses the same manufacturer's hardware).

You can't change your fingerprints - once a real copy of them are compromised, they are compromised foreverĪ representation of your fingerprint is stored on the device. And as Johannes discussed in the first article on this (), the screen on your phone is one of the better fingerprint collectors out there !įor me, this brings up both sides of "the fingerprint discussion" In other words, a copy of your fingerprint is your fingerprint. I came across an article today that demonstrates a compromise of the new Apple 5S fingerprint reader:
