141–150 of 294 posts
Earlier quoted context omitted.
Am I wrong that an (inevitable) biometric data breach would mean this can be done on the cheap (if you were unlucky enough to have given your data to a third party)?
Yes, at least for finger prints. Getting the print is easy, especially with glass back phones, it's making a good enough fake that's non-trivial.
https://www.theregister.co.uk/2002/05/16/gummi_bears_defeat_...
Earlier quoted context omitted.
It won't stand because it's not pragmatic. The issue around 'passwords being in your mind' is interesting, but they'll move past it. If you have evidence of a crime on your phone, it must be part of the process. There's nothing remotely unlawful about search of property so long as there is merit, oversight, warrant etc.. Ultimately, this will be no different than searching your car. Now, the cops doing it without a w…
The issue arises when the knowledge of the password itself is incriminating. The 5th amendment prohibits forced self incrimination. Forcing a suspect to divulge information that is directly incriminating will not stand constitutional review, regardless of the nature of the information. You have the right to remain silent.
Usually, though, they are going to be after what the password is protecting. If you try to invoke the 5th claiming that admitting knowledge of the password itself would be incriminating, prosecutors can grant you immunity over that and that greatly reduces your 5th Amendment protections with regard to that particular subject.
This might be a good time to let others know: Android (at least my OnePlus) has a "Lockdown" mode in the shutdown menu that locks the screen and prevents the usage of the biometric methods. You have to use the password. This is good because passwords have already been hashed out in court and are unequivocally protected by the fifth amendment; you don't have to tell an officer your password (and entering it for them c…
In iOS 11 and higher, you can disable Touch ID by pressing the power button 5 times in quick succession: https://www.macrumors.com/2017/08/17/ios-11-emergency-sos-di... > In iOS 11, Apple has added an "Emergency SOS" feature that's designed to give users a quick and easy way to summon emergency services should the need arise. As it turns out, there's a secondary benefit to Emergency SOS - it's also a way to quickly a…
What does that mean? It calls 911 or the local equivalent? That doesn't seem like desired behavior if you're triggering it in anticipation of crossing a border.
Earlier quoted context omitted.
Did you expect the guy to get off free for murder?
Guilt is orthogonal to due process. What if the kid hadn't committed the murder but was duped into making incriminating statements anyway? Furthermore, considering testimony given while under the influence is ridiculous.
Then maybe it would make a better example for discussions like this. As it stands, that anecdote is little more than "the police are good at their jobs and they caught a murderer which is unambiguously good for everybody, but what if they were instead using their skills for something bad?"
> "Furthermore, considering testimony given while under the influence is ridiculous."
I'm sorry but expecting cops to never talk to drunk people is just absurd. There are plenty of valid objections to modern policing, but this isn't one of them.
This might be a good time to let others know: Android (at least my OnePlus) has a "Lockdown" mode in the shutdown menu that locks the screen and prevents the usage of the biometric methods. You have to use the password. This is good because passwords have already been hashed out in court and are unequivocally protected by the fifth amendment; you don't have to tell an officer your password (and entering it for them c…
Earlier quoted context omitted.
The problem with forcing someone to reveal a secret (e.g. a password), is that ultimately, there's no way to prove that someone actually knows the password. If I say that I forgot the password, and a judge throws me in jail for contempt of court, I could rot there forever. There is absolutely no way for me to ever prove that I truly forgot the password. You can't prove a negative. With fingerprints or face scanning,…
Francis Rawls is still in jail after 2 years for not decrypting his hard drive. He's in contempt indefinitely until he decrypts the drive.
I won't believe this ruling is safe until it goes thru higher levels. The Executive Branch has over the past 2 decades has shown a large propensity for attempts to disregard the 4th and 5th amendments, and I see no change in this posture or the attempts to subvert them with the current political climate.
Bio identification is for usernames... not passwords. NEVER use a fingerprint or an iris scan for a password. That's insane! Just don't do it.
Earlier quoted context omitted.
A guy with a gun in my face can have my PIN. I’ll also happily provide my fingerprint or look at my phone to unlock it. This idea that digital security is going to solve for physical violence is absurd unless you’re willing to die to protect your digital assets.
obligatory https://xkcd.com/538/ edit: - sorry if it's annoying but for me it was a very graphical way to always remember this issue.
Earlier quoted context omitted.
In iOS 11 and higher, you can disable Touch ID by pressing the power button 5 times in quick succession: https://www.macrumors.com/2017/08/17/ios-11-emergency-sos-di... > In iOS 11, Apple has added an "Emergency SOS" feature that's designed to give users a quick and easy way to summon emergency services should the need arise. As it turns out, there's a secondary benefit to Emergency SOS - it's also a way to quickly a…
> "summon emergency services should the need arise" What does that mean? It calls 911 or the local equivalent? That doesn't seem like desired behavior if you're triggering it in anticipation of crossing a border.
I won't believe this ruling is safe until it goes thru higher levels. The Executive Branch has over the past 2 decades has shown a large propensity for attempts to disregard the 4th and 5th amendments, and I see no change in this posture or the attempts to subvert them with the current political climate.
Yes - right now, there are people being held indefinitely for not decrypting hard drives the US [1]. The law used is: "All Writs Act (28 U.S.C. § 1651)". As one judge said, "We don't want your password - we just want the hard drives in unencrypted state."
https://www.bleepingcomputer.com/news/legal/man-who-refused-...