EA Forums Online Security Newsletter - Volume 3

I'm a big fan of biometrics and use my fingerprints for quite a lot of things, like accessing secure apps and making payments on my phone. I'm sure that there are ways of getting around it if someone were determined enough (I can think of two ways someone could bypass it and access my phone, but won't mention them here), but I feel quite secure using biometrics still, and I don't think it's in an illusion of safety kind of way. 

I also used to have to use a Yubikey back when I was working in banking customer services, which is basically a dongle with a built-in reader that I had to touch to log into the secure systems. We used to have to lock them in a safe at the end of our shifts, and accidentally taking them home was seen as gross misconduct since they were so integral to us logging in securely. In my current role, which isn't anywhere near as security-focused, I still have to utilise the Microsoft Authenticator app and use my fingerprint to log in due to the security settings on my phone. 

Similar to Midnight9746, while I am comfortable using fingerprints and feel secure doing so, I'm a lot more wary when it comes to using my face or voice for security (I was made to set up voice verification by one of my banks for if I need to call them, though, but I imagine that they have KYC questions as a backup if an agent is suspicious of impersonation). In my mind, both are much easier to crack, and I suspect that the rise in AI use and deep-fakes is going to severely test both of these aspects of biometrics very shortly. 

As usual, I'm waffling, so I'll leave it there 😆

Thanks for another wonderful newsletter EA_Kuba​! 

Once again, EA_Kuba  , thank you so much for this great lesson!!👏👏

Although we're already using the transition to biometrics on some devices, it's becoming more common (even if we resist it).

It's an excellent way to eliminate the weaknesses of password-based systems: password reuse, the tedious need to remember complex passwords, and identity theft.

Furthermore, the difference between biometric access and password access or TFA is that users no longer need a nearby device to authenticate themselves, since they (the biometrics) are the authenticating factor.

I think it's great for preventing phishing. 
And as @ EA_Kalina says, to prevent children from gaining easy access. 

... Although this type of authentication has been used in cinema for many years, in many action movies with robberies (money, technology, etc.), and the "authenticators" never end up well, ..., poor fingers and eyes. Hahaha.😅

For my phone, I have the fingerprint biometrics enabled for the lock screen and I find it to be quite useful as I don't have to sit there and type in a password, (or slide a pattern), to unlock my phone.

Its also useful to help keep my phone safe, as others can't see how I had unlocked my phone and also during an emergency, I don't have to struggle as much to get the phone to the call screen. There's also some apps that supports logging in with biometrics as well, (which I do have enabled for easy access).

Although, when it comes down to face and voice biometrics, I don't trust those, (especially when earlier versions of these systems were easily fooled by pictures and voice recordings).

It's good that I've been using biometrics for a long time now on almost all applications on my s24 ultra.

That, Kalina is indeed an excellent train of thought!

I would have never come up with that, but your opinion: 

 just my opinion that kids are the ultimate security testers for devices?

Is right so many levels, (no I won't bore with going into detail), it just is.

Needless to say, I fully agree. Needfull to say, I doubt that would have ever occured to me.

Genuinly impressed!

Excellent Newsletter. Thank you 👍

Biometric authentication used to seem like something straight out of spy movies. Nowadays, many apps give us no choice but to scan our fingerprints, pushing us to embrace the march of progress. 

 For me, it's the best defence my phone has against my 6-year-old daughter. She can memorize my passcodes but hasn't cracked my fingerprint secure yet! 

Is it just my opinion that kids are the ultimate security testers for devices? New technology looks natural and easy to adapt for the young generation. I will tell you how and when my daughter will unlock my phone—it is just a matter of time—and it will probably be a sign that we need to add another layer of security.

I agree with danisoff, another great edition. Seems recently there is a lot of info and talk about passkeys, so this is a timely newsletter.

I'm also a bit slow to change too though, lol. Plus my ancient iPhone 7 died. I'll have to get a new one quickly.

I assume using an iPhone or smartphone is a good way to set this up for playing games on PC through the EA app?

Regardless, seeing as this is a hot topic right now I think more and more sites will encourage users to use it as the best method. Amazon already does.

It sounds really good, but I'm not quite ready to set it up yet - in fact I can't as I'm smartphoneless!

Thanks for another useful, and very well timed newsletter!

Great edition of the newsletter EA_Kuba! The shift towards biometrics and passkeys is definitely an exciting step forward in online security. Eliminating weak passwords and enhancing phishing resistance sounds like a game-changer.

That said, I’m a bit slow to change so I’ll be sticking with my trusty password and 2FA for now. Old habits die hard! 🙂