AMD Ryzen 7 3800X review
PowerColor 5700 RED DEVIL review
MSI Radeon RX 5700 XT Evoke review
ASUS Radeon RX 5700 XT ROG STRIX review
ViewSonic Elite XG240R Monitor Review
Promo: URCDKey Summer Sale Windows 10 Pro for $11
X570 Aorus master review
Cooler Master Silencio S600 review
AMD Ryzen 5 3400G review
ASUS RoG Swift PG35VQ Monitor review
Microsoft States It's Time to Kill Off the Password
Microsoft's solution to the password would be you. In what seems to be evangelizing for Windows Hello, its facial, fingerprint, and iris-scanning system, the company is promoting its superiority of biometrics over strings of typed text for security.
Microsoft ends last free Windows 10 upgrade possibility by 31st of December this year - 12/27/2017 10:46 AM
Windows 7 and Windows 8.1 users who want to upgrade to Windows 10 might want to do so quickly if you want the options for it to be free. Microsoft ends one of the last free upgrade possibilities the 3...
Microsoft Issues Emergency Update to their Malware Protection Engine - 12/11/2017 09:42 AM
Microsoft released an emergency update for the malware protection engine that most users should get automatically. What makes this so funny is the fact that what's supposed to protect your system h...
Microsoft to use AMD Epyc processors for its Azure cloud platform - 12/05/2017 05:56 PM
AMD has a big smile on its face today. Microsoft just announced that it will use AMD's Epyc server processors for its Azure cloud service, and that is big news alright....
Microsoft to offer fonts through Microsoft Store - 11/23/2017 09:43 AM
Microsoft will be offering fonts through its Microsoft Store. The Arial Nova font has been published in the app store, at this time only users of the latest Windows 10 Insider build can download the...
Microsoft Releases Standards for Secure Windows 10 Devices - 11/07/2017 09:27 AM
Microsoft released a set of standard that will apply a safe and secure Windows 10 system. For example, the Redmond company sets requirements for a particular processor and a trusted platform module....
anticupidon
Senior Member
Posts: 3781
Joined: 2008-03-06
Senior Member
Posts: 3781
Joined: 2008-03-06
#5506282 Posted on: 01/02/2018 10:11 AM
Hilbert,the link points to no article.
I google it, and there are several sources to that title.
Ok, now on the topic .
Microsoft, by saying that impllies that you ought to use Windows 10,right?And Windows Hello was a few days ago fooled by a photo by SYS german security firm.I am not saying that this will stay that way and it will be improved, but opens a new can of worms:
What if:
I use my computer and my spouse on the same accoount?
Do i need to change my shaving habits in order to be accepted by Hello?
I may add facial tatoo or body piercings, or suffered facial wounds/scars, will it be accepted, or go back to the old deprecated password?
i can image this scenario: get a good photo of someone from social network, 3d print it, and fool Windows Hello.
Hilbert,the link points to no article.
I google it, and there are several sources to that title.
Ok, now on the topic .
Microsoft, by saying that impllies that you ought to use Windows 10,right?And Windows Hello was a few days ago fooled by a photo by SYS german security firm.I am not saying that this will stay that way and it will be improved, but opens a new can of worms:
What if:
I use my computer and my spouse on the same accoount?
Do i need to change my shaving habits in order to be accepted by Hello?
I may add facial tatoo or body piercings, or suffered facial wounds/scars, will it be accepted, or go back to the old deprecated password?
i can image this scenario: get a good photo of someone from social network, 3d print it, and fool Windows Hello.
mbk1969
Senior Member
Posts: 7493
Joined: 2013-01-17
Senior Member
Posts: 7493
Joined: 2013-01-17
#5506286 Posted on: 01/02/2018 10:23 AM
We can add work in room without lights. Will facial recognition work in the dark room?
We can add work in room without lights. Will facial recognition work in the dark room?
Thalyn
Senior Member
Posts: 113
Joined: 2012-03-20
Senior Member
Posts: 113
Joined: 2012-03-20
#5506289 Posted on: 01/02/2018 10:26 AM
Any for of biometrics which works off a stationary input (facial recognition and fingerprints, typically) should not be used as a password. After all, the worst password you can ever have is one you leave/show everywhere and pretty much cannot change. These are, at best, user names.
Passwords need to be something which requires a living subject to be present, or at least something which can be easily altered in the event you become compromised.
Any for of biometrics which works off a stationary input (facial recognition and fingerprints, typically) should not be used as a password. After all, the worst password you can ever have is one you leave/show everywhere and pretty much cannot change. These are, at best, user names.
Passwords need to be something which requires a living subject to be present, or at least something which can be easily altered in the event you become compromised.
foxx1337
Junior Member
Posts: 12
Joined: 2006-02-07
Junior Member
Posts: 12
Joined: 2006-02-07
#5506300 Posted on: 01/02/2018 11:12 AM
This, one thousand times. The face/fingerprint/iris/blood is the USERNAME and not the password. You would expect that someone from their "top 1% talent" in there would have had that common sense already, or maybe it's the project managers' idea and maybe those guys come from the toilet of intellectuality instead of the 1%...
This, one thousand times. The face/fingerprint/iris/blood is the USERNAME and not the password. You would expect that someone from their "top 1% talent" in there would have had that common sense already, or maybe it's the project managers' idea and maybe those guys come from the toilet of intellectuality instead of the 1%...
mbk1969
Senior Member
Posts: 7493
Joined: 2013-01-17
Senior Member
Posts: 7493
Joined: 2013-01-17
#5506304 Posted on: 01/02/2018 11:25 AM
As I take it MS adopted Agile and Scrum, so they have no project managers. They are feature owners and scrum masters now.
This, one thousand times. The face/fingerprint/iris/blood is the USERNAME and not the password. You would expect that someone from their "top 1% talent" in there would have had that common sense already, or maybe it's the project managers' idea and maybe those guys come from the toilet of intellectuality instead of the 1%...
As I take it MS adopted Agile and Scrum, so they have no project managers. They are feature owners and scrum masters now.
Evildead666
Senior Member
Posts: 1090
Joined: 2003-09-14
Senior Member
Posts: 1090
Joined: 2003-09-14
#5506341 Posted on: 01/02/2018 12:35 PM
Any for of biometrics which works off a stationary input (facial recognition and fingerprints, typically) should not be used as a password. After all, the worst password you can ever have is one you leave/show everywhere and pretty much cannot change. These are, at best, user names.
Passwords need to be something which requires a living subject to be present, or at least something which can be easily altered in the event you become compromised.
100% Agree.
Biometrics is a Username, NOT a password.
It identifies you, it cannot be used as a password, as it cannot be revoked or changed.
Any for of biometrics which works off a stationary input (facial recognition and fingerprints, typically) should not be used as a password. After all, the worst password you can ever have is one you leave/show everywhere and pretty much cannot change. These are, at best, user names.
Passwords need to be something which requires a living subject to be present, or at least something which can be easily altered in the event you become compromised.
100% Agree.
Biometrics is a Username, NOT a password.
It identifies you, it cannot be used as a password, as it cannot be revoked or changed.
RzrTrek
Senior Member
Posts: 2234
Joined: 2012-04-16
Senior Member
Posts: 2234
Joined: 2012-04-16
#5506342 Posted on: 01/02/2018 12:43 PM
That would make more sense, but then again, with all of the data mining going on, I rather not have them sell my fingerprints to the authorities.
This, one thousand times. The face/fingerprint/iris/blood is the USERNAME and not the password. You would expect that someone from their "top 1% talent" in there would have had that common sense already, or maybe it's the project managers' idea and maybe those guys come from the toilet of intellectuality instead of the 1%...
That would make more sense, but then again, with all of the data mining going on, I rather not have them sell my fingerprints to the authorities.
bigfutus
Senior Member
Posts: 518
Joined: 2003-11-22
Senior Member
Posts: 518
Joined: 2003-11-22
#5506381 Posted on: 01/02/2018 02:27 PM
Microsoft go home you're drunk.
Microsoft go home you're drunk.
schmidtbag
Senior Member
Posts: 4257
Joined: 2012-11-10
Senior Member
Posts: 4257
Joined: 2012-11-10
#5506434 Posted on: 01/02/2018 05:15 PM
Is MS trying to commit suicide? How are their people so blind to the fact that this is going to heavily backfire?
I never thought about biometrics as just the username, but that is a good idea. As I've said before, facial recognition makes for terrible security, as do iris scanners and the touch-based fingerprint readers. Swiping fingerprint readers can be ok, as long as the device doesn't have glossy surfaces where your fingerprint can easily be extracted. Retinal scanners ought to be pretty safe, but, they're also inconvenient to the user. But if you use these things as a way to just simply identify yourself, that could be a good idea.
EDIT:
I wonder if having proper facial recognition in addition to simultaneous fingerprint scanning would make for decent security. It's not difficult to spoof one, but you have to be really prepared to spoof both at the same time.
Is MS trying to commit suicide? How are their people so blind to the fact that this is going to heavily backfire?
I never thought about biometrics as just the username, but that is a good idea. As I've said before, facial recognition makes for terrible security, as do iris scanners and the touch-based fingerprint readers. Swiping fingerprint readers can be ok, as long as the device doesn't have glossy surfaces where your fingerprint can easily be extracted. Retinal scanners ought to be pretty safe, but, they're also inconvenient to the user. But if you use these things as a way to just simply identify yourself, that could be a good idea.
EDIT:
I wonder if having proper facial recognition in addition to simultaneous fingerprint scanning would make for decent security. It's not difficult to spoof one, but you have to be really prepared to spoof both at the same time.
D3M1G0D
Senior Member
Posts: 1798
Joined: 2017-03-10
Senior Member
Posts: 1798
Joined: 2017-03-10
#5506438 Posted on: 01/02/2018 05:23 PM
Biometrics is undoubtedly useful. I use facial recognition on my Surface Pro 4, and I also use my fingerprint and/or iris to log into my phone (I only use the passcode after a restart, and only because it forces me to). It's a lot faster, more convenient, and it's probably more secure as well.
The fact is, most people use simple, common passwords, and never really change them. I too don't want to bother with remembering passwords, which is why I use a password manager. Biometrics will probably be a lot more secure overall (it's not entirely foolproof, but what is?).
Biometrics is undoubtedly useful. I use facial recognition on my Surface Pro 4, and I also use my fingerprint and/or iris to log into my phone (I only use the passcode after a restart, and only because it forces me to). It's a lot faster, more convenient, and it's probably more secure as well.
The fact is, most people use simple, common passwords, and never really change them. I too don't want to bother with remembering passwords, which is why I use a password manager. Biometrics will probably be a lot more secure overall (it's not entirely foolproof, but what is?).
schmidtbag
Senior Member
Posts: 4257
Joined: 2012-11-10
Senior Member
Posts: 4257
Joined: 2012-11-10
#5506441 Posted on: 01/02/2018 05:31 PM
Useful, yes. Faster, debatable. Convenient, definitely. More secure, absolutely not (assuming you don't use idiotic passwords).
For the average layman on an everyday basis, sure, biometrics is probably a better route. But for anyone who cares about security, having a complex and lengthy password is more foolproof than your fingerprint, face, iris, voice, or DNA. Once you get to around 10 characters, a password isn't worth brute-force cracking anymore. Remember - just because the computer doing the hacking could potentially crack the password in a matter of hours, it's the receiving end that has to handle all those requests. So, it could still take a lifetime to crack such a password.
Biometrics is undoubtedly useful. I use facial recognition on my Surface Pro 4, and I also use my fingerprint and/or iris to log into my phone (I only use the passcode after a restart, and only because it forces me to). It's a lot faster, more convenient, and it's probably more secure as well.
Useful, yes. Faster, debatable. Convenient, definitely. More secure, absolutely not (assuming you don't use idiotic passwords).
The fact is, most people use simple, common passwords, and never really change them. I too don't want to bother with remembering passwords, which is why I use a password manager. Biometrics will probably be a lot more secure overall (it's not entirely foolproof, but what is?).
For the average layman on an everyday basis, sure, biometrics is probably a better route. But for anyone who cares about security, having a complex and lengthy password is more foolproof than your fingerprint, face, iris, voice, or DNA. Once you get to around 10 characters, a password isn't worth brute-force cracking anymore. Remember - just because the computer doing the hacking could potentially crack the password in a matter of hours, it's the receiving end that has to handle all those requests. So, it could still take a lifetime to crack such a password.
Clouseau
Senior Member
Posts: 2310
Joined: 2011-05-17
Senior Member
Posts: 2310
Joined: 2011-05-17
#5506451 Posted on: 01/02/2018 05:59 PM
And in the near future...some individuals will be walking around with an eye patch and a missing index finger or hand.
Tin Foil Hat time... it all about having finger prints and facial features at the ready to convict anyone at the authority's leisure (trumped up charges).
Reality wise, this is all just a matter of time. Just think it ridiculous that a home computer used for casual use needs such security measures.
And in the near future...some individuals will be walking around with an eye patch and a missing index finger or hand.
Tin Foil Hat time... it all about having finger prints and facial features at the ready to convict anyone at the authority's leisure (trumped up charges).
Reality wise, this is all just a matter of time. Just think it ridiculous that a home computer used for casual use needs such security measures.
cowie
Senior Member
Posts: 13186
Joined: 2005-03-30
Senior Member
Posts: 13186
Joined: 2005-03-30
#5506455 Posted on: 01/02/2018 06:04 PM
we will all have to like whatever ms says anyways
I still do think a 15 year old with a picture of the user and a basketball will hack the crap out of it.
pretty soon it wont be just them stealing your ID but your eyeballs fingers and other body parts
we will all have to like whatever ms says anyways
I still do think a 15 year old with a picture of the user and a basketball will hack the crap out of it.
pretty soon it wont be just them stealing your ID but your eyeballs fingers and other body parts
RealNC
Senior Member
Posts: 2949
Joined: 2011-11-24
Senior Member
Posts: 2949
Joined: 2011-11-24
#5506456 Posted on: 01/02/2018 06:07 PM
Maybe it's time to kill off Microsoft.
Maybe it's time to kill off Microsoft.
Click here to post a comment for this news story on the message forum.
Senior Member
Posts: 15417
Joined: 2009-02-25
Error?
Although I can understand having fingerprint, iris or face scan as a alternative if the system supports the tech, nothing wrong with having both though but obviously the password needs to be something besides abc123 and common terms ha ha.