I think the thing that really surprises me is that Washington Post reporters are using Apple products and not just a Linux distribution. They are professionals. At some point, Apple can be compelled to work against you, but Linux is just a product off the shelf.
Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
111–120 of 120 posts
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#112Earlier quoted context omitted.
> courts can absolutely force you to enter a password even if it's not written down by holding you in contempt indefinitely. This is not true outside of a narrow exception. Indeed this is the core point of the 5th Amendment, to protect you from having to be witness against yourself. It's just as binding on the judicial branch as it is on the executive. Ordinarily, a court may not compel a defendant to testify or say…
There are lot cases where it is proven that you don't have any legal protection on border crossings.
>There are lot cases where it is proven that you don't have any legal protection on border crossings.
Assuming "you" here refers to US citizens, there are actually no such cases, because it is not true that we don't have any legal protection at the border. Quite the contrary! There are certainly cases covering how certain protections are reduced, but that's a long way from nothing. Most importantly and foundational, all US citizens have an absolute right to return at a land border crossing, even without any form of ID or the like. You cannot be kept out. Without appropriate ID it may take longer to verify you and they can check. If there's probable cause for a crime, or an active warrant, then of course they can arrest you, but that process then plays out domestically same as if you'd been arrested at home. They can examine and seize physical goods with cause, but you can then challenge that and ultimately get it back. But they can't keep you out, whether you voluntarily cooperate or not, and they can't arrest you without all the same domestic legal justification and process.
I don't want to understate that the amount of trouble and financial challenge that in principle border patrol can impose/get away with can be substantial for a lot of people. Someone might be in a rush to catch some connecting leg of their journey, or have responsibilities at home/work that are time sensitive. Not everyone by a long shot can afford to be without their phone/notebook/equipment for days/weeks/months. Not everyone can afford serious legal representation and the resulting time sink. Etc etc. But even so ultimately we do have legal protections that we can all make use of and can stand upon.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#113Earlier quoted context omitted.
There's also the issue that the device is covered in fingerprints, and if you can build a clean image of the print, you can likely manufacture a gelatin copy of that fingerprint that will work on most fingerprint scanners. I can't speak to the current generation of Apple fingerprint scanners, but historically iirc you can grab a print, clean it up in Photoshop, print it on OHP transparency using a laser printer and u…
Aren't the current fingerprint scanners ultrasonic rather than optical? I think they rely on the actual physical ridges
The process uses the depth of the toner layer to make a mould of the physical ridges, which you use to generate a a gelatine cast of them. It's like a single-layer depth 3D print where the medium is fused toner from the laser printer.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#114Earlier quoted context omitted.
I wrote this after the case of a Washington Post reporter, Hannah Natanson, was compelled to unlock her computer with her fingerprint. This resulted in access to her Desktop Signal on her computer, revealing sources and their conversations. https://www.yahoo.com/news/articles/washington-post-raid-pro... Edit: I've a lot more details about the legality and precedence on the apps landing page https://paniclock.github.i…
Can you intentionally use the wrong finger so that it will force to enter password
Hypothesis: If you can assign different fingers to different accounts, you could use (for example) your middle finger to switch to a "panic account" whose automatic login procedure includes disabling Touch ID.
Or, to avoid arousing suspicion, link the most common "login finger" (pointer finger?) to the account that locks down, and use your middle finger for your normal account day in and day out.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#115Earlier quoted context omitted.
> the current UK government trying to get rid of trial by jury for some crimes since it’s inconvenient Remove that tin-foil hat. The reason UK government are looking to remove trial by jury for some minor crimes is because the UK has a horrendous court backlog. It is not uncommon to have to wait a year or more for your day in court. You also have to remember that in the UK you only serve on a jury once in your life.…
> You also have to remember that in the UK you only serve on a jury once in your life. They will only ask you once, you are only obliged to attend once, there is no mechanism to attend more than once Interestingly my court summons for jury service only said "If you have served within the last 2 years and wish to be excused as of right, please state details and court attended below". Do you have a better excuse or are…
Yeah you can definitely do jury duty multiple times in the UK, though I believe it's a lottery and statistically uncommon.
I've ended up doing it twice, within a few years of each other. Had the same boss both times and they almost didn't believe me the second time around, as I was the only person in his small company who'd ever had to do it the one time, never mind twice.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#116What's the timing like between the lid sensor firing and sleep actually kicking in on Apple Silicon? I ship a couple menu bar apps on M2 and listening for NSWorkspaceWillSleepNotification feels like you get maybe 200ms before the system is gone. If disabling TouchID requires a round trip to the secure enclave in that window that seems like it'd be a race.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#117[flagged]
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#118Earlier quoted context omitted.
Notably macOS cannot do this
If you create a piv certificate on a yubikey and just plug it in while logged in, it automatically registers it as a login method.
Yeah but then it will only use the certificate on the yubikey and not ask for a password so we’re back to 1FA
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#119It’s easy enough to just configure TouchID so that it doesn’t work to log into your computer. It’s only used for authorization to do certain operations (like ApplePay), once you have logged on with a password.
I do this on all my devices. And I don’t use FaceID for anything at all. Which makes modern iPhones a bit of a pain, but I do it anyway.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#120Earlier quoted context omitted.
If you create a piv certificate on a yubikey and just plug it in while logged in, it automatically registers it as a login method.
Yeah but then it will only use the certificate on the yubikey and not ask for a password so we’re back to 1FA
It's 2FA because you need the pin for the Yubikey as well.