Live data from Hacker News

Face ID, Touch ID, No ID, PINs and Pragmatic Security

troyhunt.com

11–20 of 314 posts

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#11
post #9
post #3

All I know is that I will avoid any system that can work if I am not conscious.

According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.

It will be called the Tom & Jerry hack :)

https://pbs.twimg.com/media/BeYn6TfIIAESHte.jpg

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#12
Nice article. However:

> It's alarming not just because the number is so low, but because Dropbox holds such valuable information for so many people.

I'd suggest that Dropbox users somewhat self select for those not as concerned about security as others. And more concerned about availability.

Dropbox does not encrypt your data server side (or at the very least, can easily decrypt it). And they have proponents of warrantless surveillance on their board:

http://www.drop-dropbox.com

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#13
post #9
post #3

All I know is that I will avoid any system that can work if I am not conscious.

According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.

Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#14
post #13
post #9

Earlier quoted context omitted.

According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.

Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.

Do they actually have that ability, though? There's a big difference between "the authentication mechanism has access to this API when you're authenticating" and "everything always has access to this API at all times". I haven't seen any indication that this will be generally available on-demand to applications, and Apple's track record on this stuff isn't terrible (largely because Apple isn't existentially dependent on advertising like some other vendors of mobile tech).

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#16
post #13
post #9

Earlier quoted context omitted.

According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.

Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.

I don't think Apple would allow that in their platform but could certainly give ad tech firms ideas.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#17
post #13

Earlier quoted context omitted.

Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.

Do they actually have that ability, though? There's a big difference between "the authentication mechanism has access to this API when you're authenticating" and "everything always has access to this API at all times". I haven't seen any indication that this will be generally available on-demand to applications, and Apple's track record on this stuff isn't terrible (largely because Apple isn't existentially dependent…

The camera and the sensors can be available but I'm certain the auth mechanism itself won't be accessible. AFAIK they have a dedicated chip for this like Touch ID and what software can is limited.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#19
post #13
post #9

Earlier quoted context omitted.

According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.

Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.

Black Mirror made a shot at this. Ads which give you a fine if you don't watch them.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#20
post #8

For me it's not so much the paranoia or the degree of security (which is an arguable point in itself) but the commodity of it. Touch ID lets me unlock my devices without having to re-position my upper body or move them in (practically) any way, and Face ID feels awkward (I'm typing this on the device that is likely an exception to that - a Microsoft Surface Pro - and Windows Hello's face recognition works beautifully…

> Face ID feels awkward Have you used it?

There's some app that uses the face++ api to do login using facial recognition, I can't recall the name of it off the top of my head but maybe you can find it with that info.

edit: how could I forget, it's the little known app called Alipay.\s

Post reply on HN