But the researcher, who works for Information Risk Management, warns the attack could become commonplace if current practices don???t change and could be used to log images of retinas, facial features and any other physical characteristics used by biometric systems.