11–20 of 190 posts
Not a fan of solely using fingerprints for authentication. Good systems allow you to rotate keys. I only got 10 fingerprints.
And you might not have any, once an adversary is done with you.
The first thing that comes to mind for me is the Apple patent on recognizing a fingerprint anywhere on the phone's surface, and using that in combination with Android-style lock screen patterns. A lock screen pattern isn't nearly as secure as a full password, but it could serve a similar legal role.
This is why my unlock is not tied to biometrics. Once I realized the government can compel you to unlock your phone without a warrant using your fingerprint it became a much less compelling feature. The same for facial recognition.
I have to wonder what sort of technical measures could be implemented to make biometric systems as legally secure as passwords while still retaining something like the same convenience. The first thing that comes to mind for me is the Apple patent on recognizing a fingerprint anywhere on the phone's surface, and using that in combination with Android-style lock screen patterns. A lock screen pattern isn't nearly as s…
[p.s. this should be relatively trivial to roll out in a patch by Apple.]
Earlier quoted context omitted.
And you might not have any, once an adversary is done with you.
Fortunately, my threat model does not include people cutting off my fingers. Take out the pliers and you can have my phone. My notes are private, but not that private.
Just another reason to forgo the convenience of biometrics in favor of a password/phrase that exists only in your mind. At least for now, that's something you can't be compelled to produce. Really though, this descent into a police state is such a pathetic outcome for this country. Dangerous, scary, and tragic, but also... pathetic. This is what happens when a sizeable majority don't even participate in the electoral…
This is why my unlock is not tied to biometrics. Once I realized the government can compel you to unlock your phone without a warrant using your fingerprint it became a much less compelling feature. The same for facial recognition.
Yep. I got into a little argument with my brother over this last week, as he is a "I don't care, I have nothing to hide."
Just another reason to forgo the convenience of biometrics in favor of a password/phrase that exists only in your mind. At least for now, that's something you can't be compelled to produce. Really though, this descent into a police state is such a pathetic outcome for this country. Dangerous, scary, and tragic, but also... pathetic. This is what happens when a sizeable majority don't even participate in the electoral…
A sizable majority would go along with this, because they haven't been come for yet, as the saying goes.
The government is on a "fishing expedition" -- obtaining a warrant to search the phones so that they can (hopefully) find evidence. As mentioned in the article, it doesn't work that way (they're going about it backwards).
I have to wonder what sort of technical measures could be implemented to make biometric systems as legally secure as passwords while still retaining something like the same convenience. The first thing that comes to mind for me is the Apple patent on recognizing a fingerprint anywhere on the phone's surface, and using that in combination with Android-style lock screen patterns. A lock screen pattern isn't nearly as s…