491–500 of 565 posts
Earlier quoted context omitted.
I want to say that is generous of her, but one thing that is weird is if I didn’t want someone to go into my laptop and they tried to force me to use my fingerprint to unlock it, I definitely wouldn’t use the finger I use to unlock it on the first try. Hopefully, Apple locks it out and forces a password if you use the wrong finger “accidentally” a couple of times.
Correct. That’s why my Touch ID isn’t configured to use the obvious finger.
Earlier quoted context omitted.
I really wish Apple would offer a pin option on macos. For this reason, precisely. Either that, or an option to automatically disable touchid after a short amount of time (eg an hour or if my phone doesn't connect to the laptop)
uhm, are you saying its not possible to require an actual password to unlock osx?
Remember...they can make you use touch id...they can't make you give them your password. https://x.com/runasand/status/2017659019251343763?s=20 The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it.
> they can't make you give them your password. Except when they can: https://harvardlawreview.org/print/vol-134/state-v-andrews/
I have my phone setup this way because FaceID can be so convenient. I know it opens up more attack vectors than not using it but is it possible for a powerful actor to utilize the fact that it is enabled at all to gain access to a locked phone?
Earlier quoted context omitted.
I really wish Apple would offer a pin option on macos. For this reason, precisely. Either that, or an option to automatically disable touchid after a short amount of time (eg an hour or if my phone doesn't connect to the laptop)
uhm, are you saying its not possible to require an actual password to unlock osx?
uhm, are saying that i'm saying that? if so, please show me where i said that. thank you
Earlier quoted context omitted.
I previously commented a solution to another problem, but it assists here too: https://news.ycombinator.com/item?id=44746992 This command will make your MacBook hibernate when lid is closed or the laptop sleeps, so RAM is written to disk and the system powers down. The downside is that it does increase the amount of time it takes to resume. A nice side benefit though, is that fingerprint is not accepted on first unlo…
> I believe secrets are still encrypted at this stage similar to cold boot. Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?
Signal itself wouldn’t even be detectable as an app
Earlier quoted context omitted.
But is not legal testimonial
Right. Like I said, that's not logical, that's just legalese to gain access where you didn't have it before.
Earlier quoted context omitted.
In case anyone is wondering: In newer versions of MacOS, the user must log out to require a password. Locking screen no longer requires password if Touch ID is enabled.
Settings -> lock screen -> “Require password after screen saver begins or display is turned off”
Earlier quoted context omitted.
Good reminder to also set up something that does this automatically for you: https://news.ycombinator.com/item?id=46526010
I generally avoid extensions that can read all sites (even if technically necessary), so use the suggestion found here [1] instead. A few bookmarklets: javascript:(function(){if (location.host.endsWith('x.com')) location.host='xcancel.com';})() javascript:(function(){if (location.host.endsWith('youtube.com')) location.host='inv.nadeko.net';})() javascript:(function(){if (location.hostname.endsWith('instagram.com')) {…
For example duck://player/fqtK3s7PE_k where the video id in youtube url https://www.youtube.com/watch?v=fqtK3s7PE_k
But it doesn't have that overview page like inv.nadeko.net does