Marcus A. Wilson

This DDoS attack has to make you think. Hackers are always one step ahead of the security. Organization spend resources to keep devices secure, and don’t even think about some of these things that were used in this attack. We can do the best we can, but must always be prepared to deal with a breach or hack. It’s inevitable.

As you’ve state, the article does bring up a very important point about biometrics data. Although biometrics is considered the most secure way to authenticate and individual, it also has it weaknesses. Unlike other authentications methods like username, passwords, and physical tokens, biometrics identity cannot be replaced, Although the banks are trying to use the most secure method of authentication the really must evaluate the risks of the loss of customer’s biometric data. They can’t simply ask a person to change the password, send them a new token, or give them a 2 year credit monitoring the service. A person’s biometric cannot be simply changed or replaced.

It’s alarming to know that even biometric authentication which is supposed to be the most secure means of authentication has its vulnerabilities. The theft of biometric information supports the assertion that nothing is ever completely secure. Even these expensive, cutting-edge biometric systems aren’t completely secure. I think it will be interesting to see what kind of innovations come out of the evolution of authentication methods.

Marcus,

I used to think biometric authentication could be a better way to help people secure their asset. After I read this new, I changed my mind because the point that once criminals obtained your biometric information, you can not even change it as passwords. If the data was breached, what can we do to protect ourselves?

Nice work. Did you happen to look through LinkedIn? Occurs to me you might get a bit more from there.

This is very scary indeed. Altering the data wouldn’t only be a simple thing such as a cosmetic issue, it will also be a functional issue with potential to lose the company millions of dollars. Without getting into too much detail, where I work this type of data is used to authorize transaction made by credit cards. If any of the data is altered, the decision system might approve or decline a transaction that shouldn’t have been.

The Pakistan Swift Hack is a good example of this. All it takes is one weak link. So, yes, I would be concerned about some of the smaller institutions.

Wade

Agree with the article, but this can be a hard sell to security minded operations. How much access do you grant to the data store? What data do you scrub? Each step that limits risk, also limits effectiveness.