Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Face ID, Touch ID, No ID, PINs and Pragmatic Security

troyhunt.com

Post reply on HN
Print view View original

101–110 of 314 posts

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#101

Post by saluki »

Stolen iPhones should be worthless.

Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN.

Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the iPhone for anyone thinking of buying it.

The potential buyer can check if the iPhone is stolen by using the feature that is allowed to connect to the internet and validate the phone.

They need to make it where stolen iPhones are worthless so when you are getting mugged criminals won't even want it.

Obviously have an option setup where you can transfer ownership of your phone. Maybe with a 7 day waiting period.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#102

Post by nxsynonym »

tony101 wrote: post #94

Given that the authentication methods are "differently secure," wouldn't it be good if we were offered the option to combine them and require both for unlock? I would love to use Face ID + PIN or Touch ID + PIN for better security.

I want this, and also the ability to secure different areas of my phone.

I want to be able to set touch or PINs for certain apps, so that I can have multi level security. Why is there so much emphasis on one master password/touch ID/face ID instead of having multiple security checks?

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#103

Post by sjwright »

saluki wrote: post #101

Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…

Activation Lock does exactly what you want and already exists. If someone steals an iPhone associated with an iCloud account, it's completely useless to the thief.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#104

Post by [deleted] »

saluki wrote: post #101

Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…

[deleted]

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#105

Post by baby »

thisone wrote: post #43
baby wrote: post #37

Earlier quoted context omitted.

> without having to re-position my upper body why would you unlock your phone if you're not going to look at it? I don't understand this argument.

my phone is currently sat on my desk, about 10 inches from my right arm. I can, and do, check messages on it, by only repositioning my arm to unlock it. I easily read any messages by glancing at the phone, never coming into any decent imaging range.

If you have a mac you can use Messages to check your message on your laptop directly.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#106

Post by eckza »

saluki wrote: post #101

Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…

They already are. You can sign in to your Apple ID, nuke your phone from orbit, put it in Lost Mode so that it can't be used for anything other than 911 calls, etc etc etc. And you can call your carrier, report it stolen, and bam - the ESN is blacklisted and the phone is a brick.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#107

Post by baby »

jrimbault wrote: post #41
baby wrote: post #37

Earlier quoted context omitted.

> without having to re-position my upper body why would you unlock your phone if you're not going to look at it? I don't understand this argument.

I unlock the phone while it's still in my pocket, by the time it reaches eye level, it's already unlocked. And with a few muscles memory tricks, there's even a chance I have opened the right app without even looking in the fraction of a second it took me to take the phone out of my pocket.

I've actually never seen anyone doing that. I don't think that's a valid argument against Face ID. It's still faster than a PIN code and (seems) more secure than touch ID.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#108

Post by tlrobinson »

saluki wrote: post #101

Stolen iPhones should be worthless. Apple need to create a system where stolen phones can be reported to them, Apple can then contact the owner/verify they are stolen. And then add them to a stolen list and disable calling/apps on those phones. And display an overlay on the screen THIS PHONE IS STOLEN. Every iphone would come with an validate phone feature that is accessible even when locked that can authenticate the…

IIRC if "Find My iPhone" is enabled then the phone is worthless (except for parts)

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#109

Post by symlinkk »

This article doesn't really say much of anything. Troy pretty much just summarized a few slides from the Apple event and then ended the article saying he was going to buy an iPhone X and is interested to see how Face ID turns out. I really gained nothing from reading this.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#110

Post by heartbreak »

thisone wrote: post #43
baby wrote: post #37

Earlier quoted context omitted.

> without having to re-position my upper body why would you unlock your phone if you're not going to look at it? I don't understand this argument.

my phone is currently sat on my desk, about 10 inches from my right arm. I can, and do, check messages on it, by only repositioning my arm to unlock it. I easily read any messages by glancing at the phone, never coming into any decent imaging range.

Turn on the front camera, lay the phone on your desk. Can you see your face in the image? Then you can unlock your phone by glancing over at it.
Post reply on HN