**Biometric Apps Will Soon Be Pushed Across the Web**
This is a bad idea:
1. You can't "reset" your biometrics like a password.
2. Biometrics aren't hashable. The end result is they're less secure than other forms of authentication. (If you don't understand what this means, you're not qualified to have an opinion on this matter.)
3. You can't control what happens to your biometrics once they're in the hands of a 3rd party.
Please re-Toot.
@profoundlynerdy I'm still a fair bit of a noob in the whole security sphere, so I'm wondering why exactly they aren't hashable? Aren't they already decoded into a (uniquely) identifiable string or something, which can then be hashed like a password?
@profoundlynerdy Wow, I feel dumb for that not thinking about that that they're easily retrievable already lol. But thanks!
You could at least say the attacker has to be able to be near anywhere you frequent to be able to get the prints at least. I don't think they'd have value on shady markets just yet since biometrics aren't thaaat widespread.
@thecapegreek This is why: https://hackaday.com/2015/11/10/your-unhashable-fingerprints-secure-nothing/