Earlier quoted context omitted.
According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.
Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.
Face ID, Touch ID, No ID, PINs and Pragmatic Security
21–30 of 314 posts
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#22what about FaceID + pin? that would mean someone would have to know your pin as well as have access to your face. you also wouldn't have to look so paranoid while entering the pin. and pin by itself would be of little value.
For 'extreme' security situations, you might as well just have a long secret PIN and no biometrics.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#23Every so often, I leave my phone at home and I need my wife to get some info from it. Or my phone runs out of batteries and my wife's phone is there, and I use to to make a phone call.
With Face ID, these possibilities go away.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#24There is an opposite use case which will make me consider getting an iPhone X for a long time. Every so often, I leave my phone at home and I need my wife to get some info from it. Or my phone runs out of batteries and my wife's phone is there, and I use to to make a phone call. With Face ID, these possibilities go away.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#25Near-field worn devices. http://nfcring.com is an example of what I have in mind. What I'd like to see is this tied into an identity system, such that the ring (or other very-hard-to-misplace, but replaceable and discardable) token is not itself an identity, but rather an access token to an identity store which can present any given identity to any given system. That might be a consistent identity across multiple ses…
Slightly ironically the TLS is broken on that nfcring website.
There are a few other flags raised about that particular implementation, though the concept itself is the key point. The idea of a signet ring to authenticate, sign, access, pay, claim, and/or decrypt seems useful.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#26There is an opposite use case which will make me consider getting an iPhone X for a long time. Every so often, I leave my phone at home and I need my wife to get some info from it. Or my phone runs out of batteries and my wife's phone is there, and I use to to make a phone call. With Face ID, these possibilities go away.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#27There is an opposite use case which will make me consider getting an iPhone X for a long time. Every so often, I leave my phone at home and I need my wife to get some info from it. Or my phone runs out of batteries and my wife's phone is there, and I use to to make a phone call. With Face ID, these possibilities go away.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#28Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#29There is an opposite use case which will make me consider getting an iPhone X for a long time. Every so often, I leave my phone at home and I need my wife to get some info from it. Or my phone runs out of batteries and my wife's phone is there, and I use to to make a phone call. With Face ID, these possibilities go away.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#30Nice article. However: > It's alarming not just because the number is so low, but because Dropbox holds such valuable information for so many people. I'd suggest that Dropbox users somewhat self select for those not as concerned about security as others. And more concerned about availability. Dropbox does not encrypt your data server side (or at the very least, can easily decrypt it). And they have proponents of warr…
I would rather say that Dropbox is being used by many people without tech knowledge. And while they might be concerned about security, they often just don't know how improtant 2 factor authentication is. At least that's what I can see for some friends & family.