Earlier quoted context omitted.
I presume you can enroll multiple faces, no?
FaceID currently only supports one face. Source: https://twitter.com/reneritchie/status/907724254652784640
But waht if my face is not supported?
Face ID, Touch ID, No ID, PINs and Pragmatic Security
241–250 of 314 posts
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#242Earlier quoted context omitted.
I'm not sure, but I know with my spouse and I, we always put each others Biometrics into each other's devices (I add her fingerprints to my phone and vice versa), share a lastpass account so we know each other's passwords, add our email accounts to each other's devices so we can always look at each others email, etc. If you are married to someone and don't trust them enough to do the same I have to question the found…
Not trying to tell you how to live your life, but being an open book to the other isn‘t very trusting. If your trust is build around being able to spy on the other, maybe you aren‘t trusting each other that much. My wife and I both have our own separate phones and computers without each other being able to access it and I trust her not to do anything that goes against our interests and vice versa. That‘s what trust i…
There are also lots of people in abusive (or just "problematic") relationships for whom some privacy around their phone can be extremely valuable. That's why I'd prefer the societal norm to be NOT sharing credentials. Which of course doesn't mean that all people have to follow that.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#243Earlier quoted context omitted.
> The face scan isn't "insecure" even if you're worried about border searches. Just turn off your phone when you get in the security line! Pin will be required on start. As far as border searches go, border officers have the authority to request your PIN just as they have the authority to request your thumbprint/faceprint/etc. If you don't give it to them, you can be detained and/or your phone confiscated [1]. Reboot…
They can request your PIN all they want, but you are not obligated to provide it. They can temporarily detain you but not indefinitely, and the EFF is challenging their authority to even do that. [0] Personally, I would refuse to unlock my phone. My privacy and upholding civil liberties is worth being detained for a few hours (or even days). [0] https://www.eff.org/press/releases/eff-aclu-media-conference...
This only works if your lawyer is with you or you're white.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#244Earlier quoted context omitted.
> The face scan isn't "insecure" even if you're worried about border searches. Just turn off your phone when you get in the security line! Pin will be required on start. As far as border searches go, border officers have the authority to request your PIN just as they have the authority to request your thumbprint/faceprint/etc. If you don't give it to them, you can be detained and/or your phone confiscated [1]. Reboot…
They can request your PIN all they want, but you are not obligated to provide it. They can temporarily detain you but not indefinitely, and the EFF is challenging their authority to even do that. [0] Personally, I would refuse to unlock my phone. My privacy and upholding civil liberties is worth being detained for a few hours (or even days). [0] https://www.eff.org/press/releases/eff-aclu-media-conference...
Does this work for non US-residents e.g. tourist, conference, etc? Or do they politely show you the way out (the country)?
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#245Earlier quoted context omitted.
They can request your PIN all they want, but you are not obligated to provide it. They can temporarily detain you but not indefinitely, and the EFF is challenging their authority to even do that. [0] Personally, I would refuse to unlock my phone. My privacy and upholding civil liberties is worth being detained for a few hours (or even days). [0] https://www.eff.org/press/releases/eff-aclu-media-conference...
Does this work for non US-residents e.g. tourist, conference, etc? Or do they politely show you the way out (the country)?
No, if you're just visiting they can ask for whatever they please.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#246It would be interesting if we could specify a particular face pattern to unlock the phone. Imagine you set up your phone to open only if you smile, now if someone picks up your phone and try to unlock it by pointing it at your face, not smiling would be easier than closing your eyes or looking away. Not even mentioning the health benefit of just smiling :)
Another approach might be to have your eyes follow a pattern. Either a static pattern which is always the same, or a dynamic pattern with a challenge each time.
Might not be completely universal though...
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#247> ...when you do use the biometric options we're about to get into, you're still going to need [a pin] on your phone anyway. For example, every time you hard-reboot an iPhone with Touch ID you need to enter the PIN This is what has been missing from every discussion of this issue that I've seen so far. The face scan isn't "insecure" even if you're worried about border searches. Just turn off your phone when you get i…
I don't want to be that 'if you've got nothing to hide then' guy but why are people so worried about what border agents in particular will see on their cell phone? I am not saying that I wouldn't mind at all if my phone was searched. But I can't think of anything in particular that I would be concerned about if it was. Sure in theory the agent could remember some personal information and come back later and use that…
[deleted]
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#248Earlier quoted context omitted.
Constitutionally, an individual can not be forced to enter a password for law enforcement (including customs agents).
That's the point, "constitutionally" while they lock you up for hours/days on end to obtain the warrant needed to give up your password unless you are willing to stay locked up.
Get that sweet settlement for wrongful imprisonment.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#249> ...when you do use the biometric options we're about to get into, you're still going to need [a pin] on your phone anyway. For example, every time you hard-reboot an iPhone with Touch ID you need to enter the PIN This is what has been missing from every discussion of this issue that I've seen so far. The face scan isn't "insecure" even if you're worried about border searches. Just turn off your phone when you get i…
> The face scan isn't "insecure" even if you're worried about border searches. Just turn off your phone when you get in the security line! Pin will be required on start. As far as border searches go, border officers have the authority to request your PIN just as they have the authority to request your thumbprint/faceprint/etc. If you don't give it to them, you can be detained and/or your phone confiscated [1]. Reboot…
I read that they are not able to force you to provide a pin.
But even if you're right, this doesn't change my argument. Most people are less secure most of the time in the absence of biometric authentication. Because without it, they will opt for zero security. You can always use the pin in addition, for whatever that's worth.
Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security
#250Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…
As others note, it's already possible to remotely wipe/lock a stolen phone, and if you report it stolen to the carrier, they'll list the IMEI in a database shared to other carriers; many will refuse to activate/connect when their SIM is inserted into a phone with a known-stolen IMEI.
Short of visibly, physically destroying the phone, though, there's nothing you can do to prevent this. A criminal doesn't care that the phone is a brick; they'll sell it to someone and be miles away with the money before the buyer realizes the phone is useless.