Free "rein".
Face ID, Touch ID, No ID, PINs and Pragmatic Security
141–150 of 314 posts
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#142Earlier quoted context omitted.
All of my banking apps, among others (e.g. password manager), include options for both pin and touchID auth. Do we not already have what you’re asking for?
I think he's requesting it on the system level. For example, if iOS allowed you to force PIN+TID when opening a specific (not necessarily secure) app for the first time after an unlock. Intended for apps that don't necessarily have security built in already.
This is especially useful for when the app developer doesn't think there is a reason for them to develop such a system. For example, I don't want my son playing a zombie game, but I myself play it often. I could then lock him out of said game, but still give him my phone to use.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#143Earlier quoted context omitted.
I'm guessing they are still useful for parts though? Screens, batteries, cameras....all of that still works even if the motherboard is disabled.
Sure, but the value of parts from a stolen device is much less than the value of a working device.
But the demand for parts is a lot higher than that for stolen phones.
You might not buy a phone from an internet cafe that sells 2nd hand phones, but you might buy a replacement screen from an internet cafe that does repairs.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#144Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…
Find My iPhone + iCloud is what you're describing. Even a DFU restore of the device won't help a thief, as the activation process will simply ask for your iCloud login and will display a "Message From Owner" that you can set at icloud.com indicating the device was stolen, making it much harder for someone to purchase and claim ignorance about the origins.
Can confirm. We ran into this problem in my company as we had contractors setup phones and turn on Find my iPhone. We ended having to do some not so great things to make it so we could use the devices again.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#145Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…
> Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN.
Why would I want to give a third party the ability to brick my phone? If Apple has that power, then a disgruntled Apple employee can use that power and a government can compel Apple to use that power.
My computing devices are my computing devices. Only I should have the ability to do anything to them.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#146Given that the authentication methods are "differently secure," wouldn't it be good if we were offered the option to combine them and require both for unlock? I would love to use Face ID + PIN or Touch ID + PIN for better security.
There still must be another mechanism to access it like a password. What if the camera fails? What if you get punched in the face that day?
That’s what it does right now - if Touch ID or face id fails you still have your password to fall back on. I think it may do this automatically if the touch sensor dies but you can always force it with the 5x quick taps on the power button.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#147I really liked this write-up because it focused on the practicality of the various security mechanisms. Most articles I see usually have a blanket statement like "All biometric security mechanisms are bad!". I think this article does a good job comparing the various logins and describing the pros and cons for different people. Specifically, I appreciate the author calling out when people bring up the "What if" edge-cases, where the correct response is you likely have much bigger problems at that point than the security level of your phone.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#1481 in 1 million FAR (false acceptance rate) vs 1 in 50,000 is pretty misleading (as is Apple tradition). Do you think someone trying to hack into your phone would shoot 1 million random pictures/3D profiles made from Facebook pictures at your phone, or do you think it's far more likely they will already start with your profile made from online pictures? That will likely make the success rate even higher than with fing…
Per Apple Face ID doesn't work with photos; TBD in real world.
If they created photorealistic masks to defeat the 3D mapping and those didn't work, I feel pretty confident in saying that photos won't work.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#149Earlier quoted context omitted.
There still must be another mechanism to access it like a password. What if the camera fails? What if you get punched in the face that day?
That’s what it does right now - if Touch ID or face id fails you still have your password to fall back on. I think it may do this automatically if the touch sensor dies but you can always force it with the 5x quick taps on the power button.
It is, but GP is saying if the auto method is FaceID + password and FaceID doesn't work... then what? Clearly just the password isn't enough to get you into the phone.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#150Re: the pushback the author got on Twitter; I believe in skepticism towards corporations and marketing claims, but the level of cynicism online towards any new tech idea or product seems a bit out of hand. There's a certain trend, on Twitter especially, of people racing to prove they're either more woke or smarter than the teams of people behind things that are yet to even be released. I mean a "wait and see" attitude wrt the actual effectiveness is good, but I don't get why we need to concoct extreme hypotheticals here suggesting Apple is somehow irresponsible for adding an optional feature.