Thursday, February 23, 2012

Fingerprint verification for a web application

March 7, 2010 by Ayo Akinyemi · Leave a Comment 

I was replying to a post about this topic on a forum where I habitually visited, I started thinking on how to point this person in the right direction for this exercise since he wants to develop it using asp & mssql.

Biometric verification is doubtlessly a sound security measure, but why would you want to have that for a web based application? Putting aside the hardware cost for a moment, the fact that you would have logged on to your computer defeats the purpose of having a fingerprint verification process for a web app. Other files might be accessible since your security measure is only for the web app, which makes your database prone to data manipulation and grant easy access to the web application eventually.

You might as well have a fingerprint verification for your database access and packet exchanges while at it(I wouldn’t want my fingerprint be verified over the net), with oversights on network security(this should be a major concern since your app is web based), database security, the embarked project is doomed to fail.

Your fingerprint could easily be lifted from your coffee cup anyway as opposed to having a username/password which can’t be collected without your consent.
Come up with a better password encryption algorithm if you are so scared of a brutal force attack on your apps. That will save you some expense.

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.