Live data from Hacker News

Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

github.com

71–80 of 120 posts

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#72
> No command injection — Timeout parameter is a Swift Int, not a string

Please don't use slop machines to write READMEs. If you're launching bioutil as a subprocess, you're passing the timeout as a string. In your code, you read the timeout, convert to int, set timeout to 1, and set it back to the previously retrieved value. There is no difference between keeping it as strings or doing a string->int->string round-trip, assuming no sizing and formatting weirdness.

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#73

PSA to iOS users: if you tap the lock button 5x it forces password-only unlocking. Useful at protests or any precarious situations with law enforcement.

- TSA: Hey, bring your bag and devices here. Routine inspection. - Traveler: [takes phone from the bin] [finds lock button] [click] [click] [click] - TSA: Hey, stop what you're doing Mr. Terrorist!

That is why you would do it before you let your phone go out of sight. I used to even turn off my electronics to prevent damage by scanners. Now I don’t bother anymore but it could be a plausible excuse.

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#74
post #15

PSA to iOS users: if you tap the lock button 5x it forces password-only unlocking. Useful at protests or any precarious situations with law enforcement.

On GrapheneOS (and maybe android generic?) this calls the emergency number, I just found out (with a 5 second timer to cancel this luckily)

It is also an option in iOS under Settings -> Emergency SOS. And with it turned on it will both call emergency services and require pin for unlock.

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#75

Neat idea. I remember way back in the day, there was some question as to the legality of compelled unlocking of devices; IIRC, it’s been deemed legal to compel a fingerprint, but illegal (under the first amendment?) to compel entry of a password—IIRC, as long as that password hasn’t been written down anywhere. I gather this is written to that end primarily? Or is there some other goal as well?

I wonder if the US is the only place where this applies?

The UK, I believe, can compel you to provide passwords that you would be reasonably expected to know.

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#76
post #48

Neat idea. I remember way back in the day, there was some question as to the legality of compelled unlocking of devices; IIRC, it’s been deemed legal to compel a fingerprint, but illegal (under the first amendment?) to compel entry of a password—IIRC, as long as that password hasn’t been written down anywhere. I gather this is written to that end primarily? Or is there some other goal as well?

There's also the issue that the device is covered in fingerprints, and if you can build a clean image of the print, you can likely manufacture a gelatin copy of that fingerprint that will work on most fingerprint scanners. I can't speak to the current generation of Apple fingerprint scanners, but historically iirc you can grab a print, clean it up in Photoshop, print it on OHP transparency using a laser printer and u…

Aren't the current fingerprint scanners ultrasonic rather than optical? I think they rely on the actual physical ridges

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#77

Neat idea. I remember way back in the day, there was some question as to the legality of compelled unlocking of devices; IIRC, it’s been deemed legal to compel a fingerprint, but illegal (under the first amendment?) to compel entry of a password—IIRC, as long as that password hasn’t been written down anywhere. I gather this is written to that end primarily? Or is there some other goal as well?

I wonder if the US is the only place where this applies? The UK, I believe, can compel you to provide passwords that you would be reasonably expected to know.

Sadly yes. IANAL but under the Ripa Act they can issue a section 49 notice and you risk imprisonment for not complying. However, they need proper authorisation to do so, and the notice must be lawfully issued, so presumably a magistrate. This is all part of our famous British Justice!

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#78
post #64

How beneficial is this versus just being theater? The example used in this is the government accessing the reporters laptop via biometrics. But in this case, and especially under this admin legal or not this app won't stop them, unless I'm misunderstanding the macOS security model. Even with FDE enabled, sending it to the lock screen with biometrics disabled will not do anything to stop them from being able to access…

I'm reading this nervously on my MacBook Air, but chuckling quietly with my cheapest Mac Neo (my new travel companion).

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#79

There should just be a way to setup an alternate dummy account based on the finger you use. This gives the illusion of compliance but your real data is safe.

The middle finger could be the emergency use one ...

Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

#80
post #33

If someone can force you to use touch id they can probably also force you to enter your password. (If you’re about to comment about fingerprints on transparency film and balloons filled with warm water then yes good point)

Capable? Yes. Willing? I wouldn't be so sure. You don't even need to hurt someone to manhandle them enough to put their fingerprint on a scanner. Whereas forcing someone to give up a password could rise to the level of torture. Of course, I imagine the majority of people would yield their password if you simply threatened to detain them long enough to make them miss their flight.

I agree.. having to spend longer than necessary at UK's Manchester Airport would have me singing like a canary!
Post reply on HN