
well, I can read all their email, set up forwarders, set up rules to hide things, install malware, spyware, anything, really.Īnd we don't even know how secure the 3D facial recognition stuff is, yet. If I log onto someone else's device with a PIN that I saw them enter on a numeric keypad once, and they are logged into any of To me, even with all this, this is literally no better than an 8-character lower case password based on a dictionary word. Combine how EASY it is to take possession of a device and how EASY even a 3 year old child can watch someone enter a 4-digit PIN once then recall it and use it later.Īnd Mythbusters showed just how easy it is to fake a fingerprint with a little practice and motivation. Not be that easy for a ne'er-do-well to climb right over one of the hurdles just by snatching the device out of my car/desk/pocket/backpack/whatever. Laptops and phones get lost or stolen ALL THE TIME, and it should How does it not make the login more secure? I don't consider possession of a device to be one of the factors, because possession has absolutely nothing to do with authentication. If you're using a fingerprint to sign-in, what's the point of also entering a password or a PIN? It serves no purpose and does not make the sign-in more
