Earlier quoted context omitted.
"Sign in with Apple" requires a developer account with Apple. Having saw Epic's developer account terminated by Apple, I would definitely stay away from any "Sign in with Apple". (FWIW, the only 2fa with "Sign in with Apple", if you don't own any Apple hardware, is SMS.)
While there's always a risk anytime you build on top of someone else's platform, it's worth noting that it looks like Epic lied[0] about getting blocked from Sign in with Apple. There's no evidence they were going to lose access to it, even with a terminated developer account. 0: https://daringfireball.net/linked/2020/09/29/epic-games-unre...
Face ID and Touch ID for the Web
321–330 of 371 posts
Re: Face ID and Touch ID for the Web
#322Earlier quoted context omitted.
"Sign in with Apple" requires a developer account with Apple. Having saw Epic's developer account terminated by Apple, I would definitely stay away from any "Sign in with Apple". (FWIW, the only 2fa with "Sign in with Apple", if you don't own any Apple hardware, is SMS.)
Note that Epic claimed that "Sign in with Apple" was going to get terminated, but Apple says that wasn't true: https://www.theverge.com/2020/9/10/21431396/epic-sign-in-wit... And IIRC it all still works anyway, so this sounds like Epic either being confused about itself or lying to make Apple look like the bad guy (more). And bear in mind that anyone using any third-party auth (like Twitter, Facebook or Google OAuth)…
Apple's claim is false: https://twitter.com/TimSweeneyEpic/status/131134525357683097...
Re: Face ID and Touch ID for the Web
#323Earlier quoted context omitted.
"Sign in with Apple" requires a developer account with Apple. Having saw Epic's developer account terminated by Apple, I would definitely stay away from any "Sign in with Apple". (FWIW, the only 2fa with "Sign in with Apple", if you don't own any Apple hardware, is SMS.)
Note that Epic claims Apple was going to disable "sign in with Apple", but Apple did not do so and has claimed through unattributed press quotes that they were never going to do so, that Epic made that up.
Apple's claim is false, and can be shown to be false via documents in the court filing: https://twitter.com/TimSweeneyEpic/status/131134525357683097...
Re: Face ID and Touch ID for the Web
#324Earlier quoted context omitted.
I live in a cold climate, so I was happy to be done with TouchID. Then coronavirus happened and now it doesn't recognize me with a mask on.
Just curiosity: does it start recognizing with the mask after some time?
Anecdotally, after some of the recent updates I've noticed like a 10% match instead of 0%. It was really nice when they pushed an update to recognize a mask and fail quickly to a pin since that's what happens most often when shopping.
Re: Face ID and Touch ID for the Web
#325Earlier quoted context omitted.
Apple sits between users and developers. If it's a monopsony on one side, it's a monopoly on the other side.
Not remotely. Users can buy Android phones. Having ~50% market share is not a monopoly. Even suggesting Apple has monopsony as I did above is a stretch and is only the case if you define the market based on paying users.
> Having ~50% market share is not a monopoly.
Most competition regulators disagree. 50% of a market is well above the threshold for both the US and EU to consider a company to be a monopoly. They usually treat the cut-off as around 20%.
Re: Face ID and Touch ID for the Web
#326Earlier quoted context omitted.
They could just have it say "example.com wants to use Touch ID to sign-in. Biometric data is not shared." with a help link that goes on to explain in laymens terms how your iPhone basically sends a password-ish thing to the website after you use Touch ID (similar to how Apple Pay sends a one-time use credit card number to a merchant).
Apple's UI designers would never tolerate such a helpful and wordy dialog box.
Maybe not on iOS but the Mac is replete with messages and dialogs as long as this.
Re: Face ID and Touch ID for the Web
#327Why does it exactly show a popup saying "website wants to use Touch ID"? It could just say "Touch ID to login" on the Touch Bar and wouldn't it be enough? If the user prefers otherwise, they simply won't touch. Doesn't the popup create extra friction (unless I'm missing something)?
My understanding is that the permissions popup is used for the registration flow (generating & enrolling a key into the Secure Enclave), and after that if there are existing credentials, it's just 'Touch ID to login'.
Re: Face ID and Touch ID for the Web
#328Earlier quoted context omitted.
What if I'm running a site that is against apple's beliefs? E.g you run an adult site? Would you risk it?
Apple doesn't allow adult content in their App Store, but they don't do anything to prevent adult sites from loading in Safari, even on iOS--never have. They seem to draw a distinction between their walled gardens and the open web. I'll admit I'm not an expert on Face ID and Touch ID for the web, but to me it looks like a feature of the Safari browser, not a walled garden.
They use Web Authn, which is an open Web API : https://developer.mozilla.org/en-US/docs/Web/API/Web_Authent...
Implementing a client with this also works on Android and any computer that supports some kind of hardware authentication mechanism, like fingerprint or face recognition.
Re: Face ID and Touch ID for the Web
#329Earlier quoted context omitted.
For what it's worth, it's been said (by anonymous sources, no one on the record) that Apple did not threaten to terminate Epic's "Sign in with Apple" accounts/features, and they spent extra effort to maintain their access to that after their account was terminated. I do not know if other terminated accounts get this "luxury".
Epic did say it was going to be terminated, presumably as part of the overall account termination. They then updated that it would continue to work. https://www.theverge.com/2020/9/10/21431396/epic-sign-in-wit... Apple commented they weren’t doing anything to stop Sign In with Apple working, but I have to wonder if there’s a lie of omission in there. Like “We aren’t doing anything deliberate to stop it, but it’s goin…
You were right. And this is not the first time Tim Cook's Apple caught outright lying, or Lie of Omission. And not in any good faith.
In both Qualcomm and in IMG's Case.
The whole new Tim Cook's PR and Marketing is way worst than Steve's era in my book. Along with their business strategy and behaviour.
Re: Face ID and Touch ID for the Web
#330Earlier quoted context omitted.
Epic did say it was going to be terminated, presumably as part of the overall account termination. They then updated that it would continue to work. https://www.theverge.com/2020/9/10/21431396/epic-sign-in-wit... Apple commented they weren’t doing anything to stop Sign In with Apple working, but I have to wonder if there’s a lie of omission in there. Like “We aren’t doing anything deliberate to stop it, but it’s goin…
unnamed sources have said that Epic was outright lying https://daringfireball.net/linked/2020/09/29/epic-games-unre... > multiple sources at Apple told me Epic’s claims were simply false. There was never a September 11 deadline for their SIWA support to stop working, and in fact, Apple’s SIWA team performed work to make sure SIWA continued working for Fortnite users despite the fact that Epic Games’s developer accoun…
That is the problem with KOL, spreading wrong information and it spreads as Fact.
Gruber was also the one who spread the Safari Javascript is so much faster than its competitor because Apple have custom SoC and they use specialise ARM instruction to speed it up. And now even HN has a high percentage of people who believe in that without even thinking about it.
And like I said in the previous thread on HN about misinformation. None of these KOL, and including most media / publication care to fact check or to correct their previous wrong reporting.