Re: replacing compromised biometric authenticators

[Rich Kulawiec <rsk () gsp org>]

On Wed, Oct 11, 2017 at 05:04:08PM -0400, Ken Chase wrote:
> If the current best operating practice is to avoid biometrics, why are they
> still in use out here? 

(1) for the same reason some idiots still use captchas
(2) new hotness > old and busted, regardless of merits
(3) because they facilitate coerced risk transference away from the
people who are actually responsible (and are paid to be so) to the
people who shouldn't be responsible (and aren't paid to be)

---rsk