Fido2 and Fingerprint scan vs touch

Nico Kadel-Garcia nkadel at gmail.com
Tue Oct 12 22:41:08 AEDT 2021


On Sun, Oct 10, 2021 at 7:52 PM Jeremy Hansen <jeremy at skidrow.la> wrote:
>
> I’m evaluating the new Yubikey Bio keys and there’s some issues I don’t quite understand regarding presense touch and actual finger print verification.

Don't put too much confidence in those. There have been only
incremental improvements in fingerprint sensors in the last 20 years,
and infamous "gummi finger" paper is still valid. See
https://cryptome.org/gummy.htm, or the mythbusters episode, or test
your sensor yourself with printed fingerprints.


More information about the openssh-unix-dev mailing list