Live data from Hacker News

Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

wired.com

11–20 of 141 posts

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#12
post #7

I feel like the author of this article is missing the whole point of Fingerprint ID. The feature is meant to make using an iPhone more secure for those of us who tend to leave our phones unlocked and PIN-free. If you're storing anything of value on your phone, the existing password-based and PIN-based lock mechanisms aren't going away any time soon. If nothing else, it'd break too many organizations' Active Directory…

No, you're missing his point.

You're in court. You refuse to admit/verify the accusation that you were in the vicinity of the deceased's home. Cell phone records, dutifully recorded and reported under warrant from NSA...er...ATT, show your phone - which you are known to carry pretty much everywhere - was in that vicinity at the crime's time. You contend that does not constitute evidence. The phone is acquired, bailiff places your finger on your Fingerprint-ID-secured phone, phone unlocks, evidence thereon shows activity during that period. So much for your 5th Amendment right against self-incrimination.

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#14
post #11

Wouldn't you be able to CHOOSE what you apply a fingerprint lock to? Ideally you would only allow it for payments and not other things.

I'm looking forward to CHOOSING to locking the whole device, so that I can actually have a lock "code" (whatever form) that isn't subject to a 3-year-old poking at it so much the device locks itself up for an hour or more thinking it's under attack.

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#16
post #4

In practice, it might have the opposite effect. Currently, 4-digit PINs are (presumably) brute-forceable and the alternative of entering a longer, cryptographically-secure password every time you want to use your phone is impractical, so it doesn't really matter whether you can be legally compelled to divulge your PIN or not. However, with a fingerprint ID, you can now use a cryptographically strong password to encry…

Are you sure you can brute force the PIN? I thought the iPhone will enforce a waiting period after too many bad entries.

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#18
post #4

In practice, it might have the opposite effect. Currently, 4-digit PINs are (presumably) brute-forceable and the alternative of entering a longer, cryptographically-secure password every time you want to use your phone is impractical, so it doesn't really matter whether you can be legally compelled to divulge your PIN or not. However, with a fingerprint ID, you can now use a cryptographically strong password to encry…

I worry that they could physically force people to put their fingers on the phone, though, which would be much easier than forcing them (physically) to input the passcode.

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#19

A finger can easily be forcefully used or even removed for use later. A password however is still harder to get out of a brain and can be just as strong if it is long/complex enogh.

IF they really want your password, a 4digit pin isn't too hard to beat out of someone. Also, bruteforcing would be trivial.

Re: Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’

#20
post #4

In practice, it might have the opposite effect. Currently, 4-digit PINs are (presumably) brute-forceable and the alternative of entering a longer, cryptographically-secure password every time you want to use your phone is impractical, so it doesn't really matter whether you can be legally compelled to divulge your PIN or not. However, with a fingerprint ID, you can now use a cryptographically strong password to encry…

A PIN is perfectly fine for locking as long as it has a strict-enough backoff. For encryption, then, you need tamper-proofing rather than any particular level of password complexity.
Post reply on HN