Windows 8 adds Picture Passwords to the mix of end-user authentication. Smartcard users may have their identities “stolen” and used on a network, even if the hacker doesn’t have their smartcards or PINs. Advanced authentication mechanisms are great for meeting these types of challenges and defeating hackers. But advanced authentication won’t prevent all hacking. Neither smartcards nor two-factor mechanisms nor biometrics can prevent stolen authentication credential assaults such as pass-the-hash attacks, says Roger Grimes.”]
Source: https://www.csoonline.com/article/2616063/advanced-authentication-can-t-cure-all-security-ills.html