Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Face ID, Touch ID, No ID, PINs and Pragmatic Security

troyhunt.com

Post reply on HN
Print view View original

161–170 of 314 posts

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#161

Post by liberte82 »

joering2 wrote: post #31
madeofpalk wrote: post #10

Earlier quoted context omitted.

> Face ID feels awkward Have you used it?

But wht was wrong with TouchID ? Were there any examples of it being weak security. What will be after Touch ID? Will Apple continue progress and built in PinchID - a tiny needle that sting you to test if you are you based on your blood/DNA? This is a serious question. Because of there was noting wrong with Touch then why is it removed from new phone and replaced with Face ID. Im also concerned about the data Apple w…

It was so they could remove the home button.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#162

Post by liberte82 »

jowiar wrote: post #50
joering2 wrote: post #31

Earlier quoted context omitted.

But wht was wrong with TouchID ? Were there any examples of it being weak security. What will be after Touch ID? Will Apple continue progress and built in PinchID - a tiny needle that sting you to test if you are you based on your blood/DNA? This is a serious question. Because of there was noting wrong with Touch then why is it removed from new phone and replaced with Face ID. Im also concerned about the data Apple w…

TouchID also is problematic if you're wearing gloves, which people who don't live in San Francisco do during non-trivial portions of the year.

Well, you can always still use your PIN, same as you can with Face ID.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#163

Post by liberte82 »

jrimbault wrote: post #41
baby wrote: post #37

Earlier quoted context omitted.

> without having to re-position my upper body why would you unlock your phone if you're not going to look at it? I don't understand this argument.

I unlock the phone while it's still in my pocket, by the time it reaches eye level, it's already unlocked. And with a few muscles memory tricks, there's even a chance I have opened the right app without even looking in the fraction of a second it took me to take the phone out of my pocket.

I do the same even with PIN. I know where the keys are and have it unlocked before I'm looking at it.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#164

Post by liberte82 »

consto wrote: post #152

Honestly, the only downside I can see vs. TouchID is that you can in theory point the phone at the person and unlock it. However this is balanced out by not working while unconcious. PINs as discused are not directly comparable.

How does it not work while unconscious? Eyes need to be open?

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#166

Post by ernsheong »

tony101 wrote: post #94

Given that the authentication methods are "differently secure," wouldn't it be good if we were offered the option to combine them and require both for unlock? I would love to use Face ID + PIN or Touch ID + PIN for better security.

I'm calling it that Touch ID will make a comeback: https://twitter.com/ernsheong/status/908018119595003904

How bout: Touch ID + Face ID. Hahaa

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#167

Post by MBCook »

macintux wrote: post #148
admiralpumpkin wrote: post #123

Earlier quoted context omitted.

Per Apple Face ID doesn't work with photos; TBD in real world.

If they created photorealistic masks to defeat the 3D mapping and those didn't work, I feel pretty confident in saying that photos won't work.

I think it would be really cool if it turned out that it could tell the difference between some pairs of identical twins due to seemingly imperceptible differences.

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#168

Post by krishicks »

ekzy wrote: post #32

It would be interesting if we could specify a particular face pattern to unlock the phone. Imagine you set up your phone to open only if you smile, now if someone picks up your phone and try to unlock it by pointing it at your face, not smiling would be easier than closing your eyes or looking away. Not even mentioning the health benefit of just smiling :)

Huh. Taking that a step further, instead of Face ID being a (probably) static shot of your face, what if it were a sequence? For example, if you could set your "code" to be smiling and then frowning? Or, given it can detect eye location ("awareness"), looking at different corners of the phone in a particular sequence?

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#169

Post by microtherion »

thisone wrote: post #43
baby wrote: post #37

Earlier quoted context omitted.

> without having to re-position my upper body why would you unlock your phone if you're not going to look at it? I don't understand this argument.

my phone is currently sat on my desk, about 10 inches from my right arm. I can, and do, check messages on it, by only repositioning my arm to unlock it. I easily read any messages by glancing at the phone, never coming into any decent imaging range.

Apple would be happy to sell you a watch for that…

Re: Face ID, Touch ID, No ID, PINs and Pragmatic Security

#170

Post by mgberlin »

emilfihlman wrote: post #154

The only secure thing is a thing that only you know and only you can verify even if you are freely observed. That is, shared secrets between you and your trusted device (meaning passwords) are the singular thing that provide authentication securely. Your password cannot be extracted from your head (yet). That being said, if your risks are mundane then the benefits of biometric authentication far outweigh constant pas…

"Your password cannot be extracted from your head": obligatory xkcd https://www.xkcd.com/538/
Post reply on HN