3 ms·
As nice as the new fingerprint sensors are, they come with some nasty drawbacks[0]: Namely, your defense against legally compelled decryption is significantly
by rl3 11y ago
As nice as the new fingerprint sensors are, they come with some nasty drawbacks[0]:
Namely, your defense against legally compelled decryption is significantly weakened via use of a fingerprint sensor, since the phone's unlock mechanism is the same authentication system that the phone's encryption mechanism uses (it would be really nice to have some sort of separation there).
The last drawback, I'll simply quote verbatim from the article:
>What would happen if some government “asked” phone manufacturers to create a back door to store or send it fingerprint information, and to lie to the public with denials of the existence of such a program. Considering the news of the past few years such a scenario seems far from impossible.
On that note, I wonder how compatible smartphone fingerprint data is with data you'd find in a fingerprint database. If not immediately compatible, would it still be possible to convert it to a standardized format?
[0] http://www.forbes.com/sites/josephsteinberg/2015/03/05/wh-you-should-not-use-the-new-smartphone-fingerprint-readers/ http://www.forbes.com/sites/josephsteinberg/2015/03/05/wh-yo...
- vinay427 11y agoThe same is the case on my Nexus 6, for example. It's probably for convenience so that decrypting the device on boot also unlocks the lock screen, and also so that people don't have to remember two methods of authentication.
- redxdev 11y agoI'd argue that the fingerprint sensor has no effect on your second scenario, as manufacturers could make a backdoor to send the government your normal password too. The fingerprint sensor doesn't make that bit any easier.
- rl3 11y agoThe point was more the notion of fingerprint data itself being collected, and not necessarily for device access purposes.