I hope this will make laptop vendors and others include IR capabilities in their devices, and that those are usable outside Windows Hello. Would be cool to see what other uses people could come up with, for this "baby-kinect".
Windows Hello – Biometric authentication to Windows 10 devices
11–20 of 95 posts
Re: Windows Hello – Biometric authentication to Windows 10 devices
#12I hope that PINs and such always remain alternatives to biometrics. My usual concern -- if the locally stored biometric data is compromised (malware, poor crypto, etc.), I need a way to "change my password", which isn't really possible for something like facial recognition. Likewise, I'm curious if there's a fallback authentication method for people who lose a finger, get their faces deformed, etc.
That said, the whole device-based authentication piece seems useful. A Windows 10 computer is now one factor in a 2FA scheme and the OS (and at least one of its browsers) gets to be directly integrated into Microsoft's SSO scheme.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#13They claim physical access for "hacking" is required, but that is not true. As long as you have a root access on a device you can do anything from anywhere. I don't see how this replaces or improves passwords from this perspective. Yes it is easier for the user, since they don't have to remember the password, but everything else stays the same.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#14I'd love to understand more about how the face recognition works. Does it have any way to combat someone just printing out a picture of your face and holding it up? I've done some simple face recognition stuff with OpenCV and it's super easy to fool with photos.
The video actually shows a person attempting this, and it did not unlock the computer.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#15They claim physical access for "hacking" is required, but that is not true. As long as you have a root access on a device you can do anything from anywhere. I don't see how this replaces or improves passwords from this perspective. Yes it is easier for the user, since they don't have to remember the password, but everything else stays the same.
> As long as you have a root access on a device you can do anything from anywhere.
As Raymond Chen likes to say, "it rather involved being on the other side of this airtight hatchway." Once you have root, yes, you have compromised the machine.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#16I'd love to understand more about how the face recognition works. Does it have any way to combat someone just printing out a picture of your face and holding it up? I've done some simple face recognition stuff with OpenCV and it's super easy to fool with photos.
The video actually shows a person attempting this, and it did not unlock the computer.
It did..? I think.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#17Convenient, for sure.
However, I always have the choice of not giving up my passwords, under (even painful) threat. Also, someone cannot get my passwords if I am dead. Ever.
Unfortunately, with biometrics, it is quite easy to force me to put my face/finger/iris in front of the machine and unlock it. Even if I am (freshly) dead.
Not that cool, really.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#18Convenient, for sure. However, I always have the choice of not giving up my passwords, under (even painful) threat. Also, someone cannot get my passwords if I am dead. Ever. Unfortunately, with biometrics, it is quite easy to force me to put my face/finger/iris in front of the machine and unlock it. Even if I am (freshly) dead. Not that cool, really.
Wow - I guess any apps I build have to satisfy the "If I'm tortured" use case.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#19I don't think I'm comfortable with this.
Re: Windows Hello – Biometric authentication to Windows 10 devices
#20This was demoed to my employer when Microsoft came through a month ago. I was not impressed -- biometrics are a username, not a password.
edit: the article does not cover using your voice. I'm 99% sure they demoed to us the ability to use a custom phrase to authenticate with your voice as well.