For the 100th+ time in the last decade.. Things like Facial scans, fingerprints, etc.. Are terrible as a security measure if not paired with multiple factors and even then give a false sense of security.
Archive: https://archive.today/j3cR4
From the post: "The fun part of security audits is that everybody knows that they’re a good thing, and also that they’re rarely performed prior to another range of products being shoved into the market. This would definitely seem to be the case with fingerprint sensors as found on a range of laptops that are advertised as being compatible with Windows Hello. It all began when Microsoft’s Offensive Research and Security Engineering (MORSE) asked the friendly people over at Blackwing Intelligence to take a poke at a few of these laptops, only for them to subsequently blow gaping holes in the security of the three laptops they examined."
(post is archived)