As biometric measurement is becoming more acceptable to the public, circumvention is becoming more attractive to those who wish to undermine the integrity and reliability of said systems. Any biometric modality and/or system is vulnerable, and it is doubtful there will ever be a system totally immune to spoofing when given enough time. Spoofing is a sensor-level attack (often referred to as a “presentation” attack) in which...
Read More
I am a slave to my passwords. I have them all printed out every month or two and get them made into a booklet. I also keep the digital file of the booklet file. This is terrible. If anyone should know better, it should be me. Currently, I have 287 entries in my booklet. Now, it is terrible I keep my passwords in a (very secure) booklet. It's...
Read More
What's the big deal? There is a position held by some in the digital security community that performing biometric matching on a server is unsafe. The notion is that to do so requires the creation and storage of a database in a centralized location of many different individuals' biometric information. Further, that this centralized database of identity information creates an irresistible target for would be fraudsters, and upon...
Read More
After the recent release of the Nok Nok Labs sponsored PwC Legal whitepaper Biometrics and Privacy On Device vs On Server matching, I felt now was a good time for me to wade into this debate. These are my opinions and do not necessarily represent the opinions of Diamond Fortress Technologies, Inc. (DFT). ONYX, DFT's core technology is agnostic toward on device and on server matching; however, ONYX provides more value when...
Read More