All sounds great until you lose your phone or FIDO device, or it’s stolen, or your facial login is spoofed but still probably pretty great on the whole when combined with other methods.
I am certainly no expert but I think conceptually they are neat so long as there is another way to access the account if, like you say, you lose the device or something else happens. In the current world of social media and AI, facial login would seem to me to be the furthest thing from secure.
Agreed, they fall into the “something you have” category which is great because it’s harder for a bad actor to obtain them, like they could obtain 2FA keys in some way, example, nullifying their value. But as long as there is a failsafe backup way like you say I like it.
And with Adobe implementing AI into their photoshop tools, like it's great for photo editing and making a smoother work flow but there's always the negative side. And they did say that in the meta data it would show that an image had AI used on it but the everyday consumer of media won't know and or even think of checking into that.
Biometric authentication methods are in general not very secure.
Besides the fact there are a whole lot of procedures to fake/ spoof the biometric data.
Once breached - you can not change your biometrics that easy. Keys and passwords can easily be replaced.
Further, if you use biometric auth for a lot of services you open your self to a single point of attack - that is pretty similar using the same password for many services. And we don’t do that!
I am certainly no expert but I think conceptually they are neat so long as there is another way to access the account if, like you say, you lose the device or something else happens. In the current world of social media and AI, facial login would seem to me to be the furthest thing from secure.
Agreed, they fall into the “something you have” category which is great because it’s harder for a bad actor to obtain them, like they could obtain 2FA keys in some way, example, nullifying their value. But as long as there is a failsafe backup way like you say I like it.
The world should move away from looking at biometrics as a secret. Its not.
And with Adobe implementing AI into their photoshop tools, like it's great for photo editing and making a smoother work flow but there's always the negative side. And they did say that in the meta data it would show that an image had AI used on it but the everyday consumer of media won't know and or even think of checking into that.
https://www.engadget.com/adobe-adds-generative-ai-editing-to-photoshop-110034887.html
Biometric authentication methods are in general not very secure. Besides the fact there are a whole lot of procedures to fake/ spoof the biometric data. Once breached - you can not change your biometrics that easy. Keys and passwords can easily be replaced.
Further, if you use biometric auth for a lot of services you open your self to a single point of attack - that is pretty similar using the same password for many services. And we don’t do that!