This is why biometrics should only be used for local authentication, where there is no way to
spoof the input without disassembling the sensor or cutting of fingers. Using biometric data
for remote login is, as you've pointed out, a bad idea.
Posted Nov 26, 2007 0:42 UTC (Mon) by aigarius (subscriber, #7329)
[Link]
Even locally it is not a very good idea. Mythbusters have shown that you can fool even the top
security fingerprint scanners by simply scanning the finger, printing it out and sticking the
image to a real finger (for temperature/pulse sensors). It was shockingly trivial.