very nice thought
Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
81–90 of 120 posts
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#82> No command injection — Timeout parameter is a Swift Int, not a string Please don't use slop machines to write READMEs. If you're launching bioutil as a subprocess, you're passing the timeout as a string. In your code, you read the timeout, convert to int, set timeout to 1, and set it back to the previously retrieved value. There is no difference between keeping it as strings or doing a string->int->string round-tri…
This comment is based on one of my commits. The round-trip through Int is exactly what makes it safe.Int(value) will return nil (and be rejected) for anything that isn't a valid integer. no ; rm -rf /, no shell. String(seconds) on a Swift Int can only ever produce a decimal number. (which is probably overkill and not needed in this context.)
> Please don't use slop machines to write READMEs.
Trust me, they do a better job than I ever will.
Having said all that, it's probably something that could be dropped from the readme. I'll edit now.
edit: updated the readme. Thanks for taking the time to proof read it.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#83If this were a concern for me the better choice is shutting down the laptop to encrypt the drive and disable biometrics. This does nothing since the drive is still unencrypted.
What do you mean by “the drive is still unencrypted”?
If your threat scenario includes somebody performing a DRAM freezing attack or similar, these are orders of magnitude harder to pull off successfully than to compel or bypass a biometric sensor, especially when the device is covered in the owners fingerprints.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#84Earlier quoted context omitted.
I wonder if the US is the only place where this applies? The UK, I believe, can compel you to provide passwords that you would be reasonably expected to know.
Sadly yes. IANAL but under the Ripa Act they can issue a section 49 notice and you risk imprisonment for not complying. However, they need proper authorisation to do so, and the notice must be lawfully issued, so presumably a magistrate. This is all part of our famous British Justice!
There are several exceptions. Like border crossing or when hate crime is investigated. Arguing about legality, while interacting with police, is always losing move.
Just carry burner devices, and store sensitive stuff somewhere safe!
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#85Maybe clicking the Touch ID button could invalidate the login attempt and ask for password?
I like logging in with my finger print, but I would like an “out” in the same vein as this.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#86Neat idea. I remember way back in the day, there was some question as to the legality of compelled unlocking of devices; IIRC, it’s been deemed legal to compel a fingerprint, but illegal (under the first amendment?) to compel entry of a password—IIRC, as long as that password hasn’t been written down anywhere. I gather this is written to that end primarily? Or is there some other goal as well?
I wonder if the US is the only place where this applies? The UK, I believe, can compel you to provide passwords that you would be reasonably expected to know.
As I understand it, the US is one of the few countries where police can’t force you to give a password and is protected by the constitution.
Looks like in the EU it varies depending on the law. But unless it’s in their constitution the laws could be changed. For example, see the current UK government trying to get rid of trial by jury for some crimes since it’s inconvenient.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#87I would love to have a mode that I must use my long password to unlock my mac for security purposes. But when unlocked, use touchid as an alternative to my password for convenience.
So just the normal TouchID mode but not for unlocking the mac.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#88If someone can force you to use touch id they can probably also force you to enter your password. (If you’re about to comment about fingerprints on transparency film and balloons filled with warm water then yes good point)
I think it’s about plausible deniability: you can pretend you’ve forgotten your password, you can’t pretend you’ve forgotten your finger.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#89Can you get TouchID to register multiple fingers and script the actions; maybe your middle finger unlocks touchID, but your index finger disables touchID until you enter your password.
You can have different fingers registered to different accounts. I used it to 'fast user switch' between accounts.
Re: Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock
#90I would love to have a mode that I must use my long password to unlock my mac for security purposes. But when unlocked, use touchid as an alternative to my password for convenience. So just the normal TouchID mode but not for unlocking the mac.
> So just the normal TouchID mode but not for unlocking the mac.
Erm ? Just go to System Preferences and turn off "Use Touch ID to unlock your Mac" ??