TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Windows Hello – Biometric authentication to Windows 10 devices

103 点作者 asyncwords大约 10 年前

18 条评论

andrewfong大约 10 年前
I hope that PINs and such always remain alternatives to biometrics. My usual concern -- if the locally stored biometric data is compromised (malware, poor crypto, etc.), I need a way to &quot;change my password&quot;, which isn&#x27;t really possible for something like facial recognition. Likewise, I&#x27;m curious if there&#x27;s a fallback authentication method for people who lose a finger, get their faces deformed, etc.<p>That said, the whole device-based authentication piece seems useful. A Windows 10 computer is now one factor in a 2FA scheme and the OS (and at least one of its browsers) gets to be directly integrated into Microsoft&#x27;s SSO scheme.
评论 #9219736 未加载
评论 #9219788 未加载
评论 #9223463 未加载
评论 #9220159 未加载
评论 #9219820 未加载
评论 #9219716 未加载
评论 #9219789 未加载
therobot24大约 10 年前
As someone who actively researches biometric authentication, when I hear&#x2F;read someone saying that biometrics are &quot;usernames&quot; and not &quot;passwords&quot;, I automatically think they fundamentally misunderstand what a biometric is.<p>A biometric is both a &#x27;username&#x27; and a &#x27;password&#x27; - for instance, when you access your computer&#x2F;device&#x2F;whatnot you type in your username and your password to identify to the system that <i>you</i> are requesting access (on mobile the account is implied). When using a biometric, the system will have a stored template (similar to a password) that it associates to the system user account, and in ideal situations you (the user) do not need to do anything other than be present to access the system resources. It&#x27;s a difference between identification and verification. Do you go to your friends each time they ask you something and say &quot;are you so and so?&quot;, or have you already identified who they are? Based on the video it seems that MS is starting to understand this difference. Check out the video at ~2:35. He sits down at the login screen, and it just opens the desktop. For consumer applications this is really the goal of any biometric system.<p>Now spoofing and biometric template data being stolen are still real problems. Unfortunately, spoofing is not a very hot topic in the biometric field (usually conferences only have a relatively small percentage of papers on the subject), but given more consumer applications I&#x27;m hoping more funding will start to head that way. Concerning biometric template data, no you can&#x27;t change it in it&#x27;s most raw format, your fingerprint is static..that&#x27;s what so great about it. However, there are methods such as key-binding where the template is itself encrypted with a private key. This however leads to more passwords... In any case, it&#x27;s unfortunately up to companies like MS to start paving the way to successful implementations - if the data breaches we hear about almost monthly (Uber, Target, etc) are any indication, your password is just as at risk as your fingerprint.
评论 #9220521 未加载
评论 #9220491 未加载
评论 #9220859 未加载
realo大约 10 年前
Convenient, for sure.<p>However, I always have the choice of not giving up my passwords, under (even painful) threat. Also, someone cannot get my passwords if I am dead. Ever.<p>Unfortunately, with biometrics, it is quite easy to force me to put my face&#x2F;finger&#x2F;iris in front of the machine and unlock it. Even if I am (freshly) dead.<p>Not that cool, really.
评论 #9219655 未加载
评论 #9219535 未加载
评论 #9220823 未加载
评论 #9221710 未加载
sly010大约 10 年前
I honestly think biometric is just eye-candy. The real interesting thing here is MS Passport.<p>Passwords are only broken because for most intended purposes they act as a symmetric key that you happen to leave around everywhere and when it leaks, you have a problem.<p>If we had a web standard for asymmetric key authentication, you just unlock your device and your device authenticates you. A leaked public key (created for a single service) is useless.<p>And once you only need to unlock ONE device, you might as well remember that single password, because at that point it is way more secure than a fingerprint.<p>Of course devices break and get stolen, so you need to back up your keychain, and I bet that is exactly what MS Passport does for you, which is why it will never be adapted by other vendors.
nanna大约 10 年前
One thing I like about passwords is that they give me the choice to <i>not</i> unlock something, should I wish that, which isn&#x27;t the case with biometrics. Say I&#x27;m a journalist who gets stopped at the border of a country and am asked to open up my computer. If I want to, I can refuse - and face the consequences but still, i can make that choice. With biometrics all they&#x27;d have to do is force my finger onto the scanner, or put the computer in front of me and scan my iris or face. That&#x27;s a big downside.<p>Also, after everything we know about Microsoft and and the security services, there&#x27;s absolutely no way I&#x27;d give them my biometric data.
评论 #9221178 未加载
评论 #9221675 未加载
hurin大约 10 年前
<i>with technology that is much safer than traditional passwords</i><p>From what I understand this is simply not true - could someone with a security background weigh in if this statement has any basis (were they comparing to &lt;first_name&gt;-&quot;1234&quot; and &quot;user&quot;-&quot;password&quot;)?
tdicola大约 10 年前
I&#x27;d love to understand more about how the face recognition works. Does it have any way to combat someone just printing out a picture of your face and holding it up? I&#x27;ve done some simple face recognition stuff with OpenCV and it&#x27;s super easy to fool with photos.
评论 #9219272 未加载
评论 #9219386 未加载
评论 #9219262 未加载
评论 #9219284 未加载
评论 #9219330 未加载
pqomdv大约 10 年前
They claim physical access for &quot;hacking&quot; is required, but that is not true. As long as you have a root access on a device you can do anything from anywhere. I don&#x27;t see how this replaces or improves passwords from this perspective. Yes it is easier for the user, since they don&#x27;t have to remember the password, but everything else stays the same.
评论 #9219419 未加载
narrator大约 10 年前
Biometrics sound like the next frontier for milking licensing revenue. Pretty soon they will offer a discounted license for office, but only for one biometricly identified user. Multiple users, such as library users, will require the special license, even though they are all using the same computer.
评论 #9221067 未加载
maaaats大约 10 年前
I hope this will make laptop vendors and others include IR capabilities in their devices, and that those are usable outside Windows Hello. Would be cool to see what other uses people could come up with, for this &quot;baby-kinect&quot;.
jagermo大约 10 年前
It would be interesting if Cortana would get speaker recognition on top of speech recognition. Plus, she could ask you a question based on something (maybe whom you met for lunch a few days ago)to counter recorded voice attacks.
feld大约 10 年前
This was demoed to my employer when Microsoft came through a month ago. I was not impressed -- biometrics are a username, not a password.<p>edit: the article does not cover using your voice. I&#x27;m 99% sure they demoed to us the ability to use a custom phrase to authenticate with your voice as well.
评论 #9219777 未加载
Roritharr大约 10 年前
Great! While we&#x27;re at it: Can i please use my Microsoft Account to Remote Desktop into any currently available Device that is registered to my account, without having to jump through the hoops of doing all the port and network configuration beforehand?
sebleblanc大约 10 年前
Great! Now the FBI does not even have to arrest me to get my fingerprints and retina scanned!
评论 #9220549 未加载
评论 #9220475 未加载
lawnchair_larry大约 10 年前
I don&#x27;t think I&#x27;m comfortable with this.
higherpurpose大约 10 年前
They say the passwords or biometric data will be kept in hardware - what does that mean exactly? Is it the TPM? TPM 1.2? 2.0?
xena大约 10 年前
The only insecure part about passwords is the human element.
评论 #9219835 未加载
itsbits大约 10 年前
3d camera!!..next what? Kinect inside may phone&#x2F;laptop..wow..!!