Biometrics: Worth the cost?

This is a purely fanciful question. Just wondering what the current opinions are on biometrics as a security feature for Managed Data Centres. I mean, yeah, if you know how to lift latent prints and you have a pcb etching set, then you can spoof about 80% of the biometric systems out there. But how many people have the skills, equipment and free time to figure out a) who has access to on the biometric, 2) where to get latent prints of theirs, d) copy the shit and Q) break in and do something.

Comments? Opinions? Flames?

[rudeboy]

I would say that the more "affordable" of the biometric technologies would have to be fingerprint, signature analysis or voice print. The last two are behavioral-based biometric mechanisms, but still considered biometric. As always it is cost of comprimising confidentiality and integrity versus cost of implementing and maintaining the biometric system.

Then again, who's going to want to buy an iris scanner for a bunch of unpatched RedHat webservers when you could carry a badge with your picture on it and hire someone for $6/hr to compare the pictures to the faces?

People are still the cheapest facial recognition software money can buy.