Reality that so many security experts opt to not speak

“Touch ID and Face ID: Real biometrics or not?” https://www.biometricupdate.com/202107/touch-id-and-face-id-real-biometrics-or-not
Reading reports like the above, probably not a few people would react quickly and critically, mentioning the absence of cancellability of our body features and the privacy concerns it causes.
Few people, however, speak about the fact that the overall security is brought down to the level lower than that of a default password/PIN where the biometrics is used with a default password/PIN in a ‘two-entrance’ deployment (as against ‘two-layer’ deployment).
This security-lowering effect is the inevitable consequence of biometrics being probabilistic, as against deterministic; body features of living animals are unpredictably variable in ever changing environment.
Here is the reality that so many security experts opt to not speak - a two-layer deployment of two authenticators decreases the attack surface, whereas a two-entrance deployment increases the attack surface, thus providing a better convenience to bad guys as closely examined here - https://www.linkedin.com/pulse/negative-security-effect-biometrics-deployed-hitoshi-kokumai/

Key References
“What we need to do for NOT achieving Solid Digital Identity”
Removal of Passwords and Its Security Effect
Negative Security Effect of Biometrics Deployed in Cyberspace
External Body Features Viewed as ‘What We Are’


Additional References
For Achieving Solid Digital Identity on Information Security Buzz (Mar/2021)
What We Know for Certain about Authentication Factors
Digital Identity for Global Citizens
Image-to-Code Conversion by Expanded Password System
Summary and Brief History - Expanded Password System
Proposition on How to Build Sustainable Digital Identity Platform
Account Recovery with Expanded Password System
History, Current Status and Future Scenarios of Expanded Password System
Update: Questions and Answers - Expanded Password System and Related Issues

< Videos on YouTube>
Slide: Outline of Expanded Password System (3minutes 2seconds)
Digital Identity for Global Citizens (10minutes - narrated)
Demo: Simplified Operation on Smartphone for consumers (1m41s)
Demo: High-Security Operation on PC for managers (4m28s)
Demo: Simple capture and registration of pictures by users (1m26s)
Slide: Biometrics in Cyber Space - "below-one" factor authentication

Articles from Hitoshi Kokumai
View blog
Some friends directed my attention to this news report - · “Biometric auth bypassed using fingerpri ...

Another topic for today is “Passwordless made simple with user empowerment” · https://www.securitym ...

I take up this new report today - “Researchers Defeated Advanced Facial Recognition Tech Using Makeu ...
You may be interested in these jobs
-
Network Engineer
1 week ago
Capgemini WokingCapgemini Cloud Infrastructure Services (CIS) UK has the largest Projects & Consulting (P&C) practice in CIS globally - covering all the CIS portfolio. · ...
- Essex County Council Chelmsford
We are seeking an experienced Domestic Abuse Prevention Worker to join our Multi-Disciplinary Team. The successful candidate will work alongside subject matter experts in housing, domestic abuse, education, drug and alcohol support, youth work and mental health for adults and chi ...
- Consultancy Glasgow
We believe difference drives change. As inventive transformation consultants, we blend our strategic, creative and scientific capabilities. · We are at the forefront of digital process and operations transformation. · You will have the opportunity to work across sector · ...
Comments