Biometrics in the workplace

So my employer wants to implement fingerprint scanning clock in machines and I need to construct a solid argument that non sec minded people will follow as to why I wish to opt out of this. The job is soykaf so I WILL without a doubt quit my job over this if required but I'd rather not reach this point. Any key points I should note before speaking with my boss?

>>4419 I don't have good arguments for you, I'd probably just be honest with them and tell it makes you uncomfortable. I know that the machines where I worked would allow for entering a pin instead of a fingerprint. So you might be able to ask for that option.

Have your boss wait to see what regulations might come out of the Cambridge Analytica debacle before they invest. Would they want to pay for a system just to find out new regulation renders it unusable? Speak to their interest (money) and you should be able to convince them. How is this saving them money? Why would this not work? Are there any hidden cost they don't anticipate? Can you show examples of the system not working and draw parallels with this use case? Are there any alternatives to their goal that would be at a lower cost they could try? Just curious, but what sort of job is this?

>>4421 Adding to this, there are some decent arguments for/against fingerprint scanners in this HN thread. https://news.ycombinator.com/item?id=16801858

I would frame it in terms of bad third party actors stealing your personal data off their server. He's not going to want to here "I don't trust you with this data"... but if you tell him you don't want your biometrics " out there" for hackers to potentially steal, he might reconsider. Just a thought: have you looked into the legality of this practice? Can he actually force you into it? If he can, is he assuming some kind of legal obligation to keep the data secure? Could you sue him if your fingerprint data was stolen? Not saying any of that matters in principle but you could scare him pretty good if you started throwing the word "liability" around.

>>4420 >I know that the machines where I worked would allow for entering a pin instead of a fingerprint. So you might be able to ask for that option. This! I went through the exact same thing and I made sure I could use a pin and threatened to quit my job over it. Eventually however, it became mandatory to use the fingerprint. As promised, I walked out that day.

>I don't want to give my fingerprints to someone, how do I know you will not use that information to frame me for murder or something?

>>4427 >I don't want to give my fingerprints to someone, how do I know you will not use that information to frame me for murder or something? That's a good option if you want normal people to think you're paranoid and technical people to think you're retarded. Scanners don't take your whole fingerprint only a part of it, like hashing a password.

>>4427 >>4428 The NCIC database only associates your print with your name. You can frame someone else if you simply give a false name for them to be associated with when they are added. You just need to commit a crime after your initial internment. t. law enforcement

>>4428 >>4434 >t. I am on autistic spectrum Its a dumb enough argument against intrusion of privacy that normal person can follow it

Biometric features are not a secret. Remembered passwords are.

>>4419 Anyone can take anyone's fingerprint as simply as dusting talc on a surface and putting some tape over it. Biometric security is unsecure.

Leverage the blessings of capitalism and work with someone who doesn't demand biometrics.

Tell them that it's actually less secure. Very easy to fake. It's probably unlikely anyone would bother in this case and they know it. Remind them that this tech is new and based on what's going on lately it might be good to wait and see what kind of risks are associated with biometrics in the workplace. Tell them to imagine making employees punch in their SSN and then remind them that biometrics may be the SSN of the future.

>>4419 pwn it anon draw a bunch of squiggles that sort of resemble a fingerprint. Use them to sign in/out because the computer is dumb and will accept any black and white soykaf as a valid fingerprint. Then give everybody their 3 hours of free time to come in when they like or go home early

>>4440 This. Until the technology is invented to reach into your brain the passphrase will always be sec. You can pic up someones fingerprint or eye pattern from quite a distance with a modern smart phone camera.

>>4440 This >>4419 If you don't use a fingerprint scanner for anything else I don't see a problem in using it for work. Your fingerprint shouldn't be thought of or used as a password - because it can't be changed and that is insecure by default. (Someone correct me if im wrong) I use the scanner at work, you can have a PIN as an alternative if you like with my one. When I was hired and they told me to register my fingerprint I wasn't thinking about opsec so I just did it. In all honestly what's the worst that could happen if your fingerprint was leaked? Anyone can get it through far easier methods. Taking a picture in close range as someone else suggested.

>>4464 >Anyone can take anyone's fingerprint as simply as dusting talc on a surface and putting some tape over it. Biometric security is unsecure. >>4491 >draw a bunch of squiggles that sort of resemble a fingerprint. Use them to sign in/out because the computer is dumb and will accept any black and white soykaf as a valid fingerprint Scanners check for a pulse as well. Don't talk soykaf about stuff you haven't even tried.

>>4495 You just put the fake over your real finger and that's it. The tech has been broken for over ~3 years now.