5 ms·

Why not just ask the user if they want to trust the new sensor and authenticate using the password? If attackers have the password you've already lost, so as fa

Why not just ask the user if they want to trust the new sensor and authenticate using the password? If attackers have the password you've already lost, so as far as I can tell there's little security risk in allowing that.

xenadu02 11y ago
Because we already know from long experience that most people don't have the patience or capability to answer security questions. The reality is that an unscrupulous repair shop will just answer yes to the prompt (or tell the user to answer yes). People clicked "install" when prompted by IE to install an unrestricted ActiveX control because a banner ad wanted them to "punch the monkey". Do you really think they're going to think about the security of a touch sensor? Now take it one step further and imagine a government spy agency wants to intercept phones and replace parts. (In fact I'm sure it is already happening).
- slavik81 11y ago
  Couldn't an unscrupulous repair shop just install an event logger in the screen to get the password and skip this whole touchid business? Or even give you back a different phone that just looks like yours and requests your password? Fundamentally, I feel the real question is who gets to decide who I trust. I want to choose for myself.
illumin8 11y ago
Even if someone guesses my PIN, I still don't want them to be able to get a copy of my fingerprint sensor data. Who knows how many multi-factor auth systems will use fingerprints in the future? Stolen fingerprint data could become the next SSN that people use to steal identities.
- deleted 11y ago
  [deleted]
- m4x 11y ago
  It seems unlikely that any sensible system would use fingerprint data for security, given how easy it is to spoof. You leave your fingerprints everywhere and can't protect them once you've left the area. Authenticator + smart phone is not ideal but it's still better than fingerprints. It's harder to steal a phone from somebody, while it's almost impossible to prevent the theft of your fingerprints.

xenadu02 11y ago

Because we already know from long experience that most people don't have the patience or capability to answer security questions. The reality is that an unscrupulous repair shop will just answer yes to the prompt (or tell the user to answer yes). People clicked "install" when prompted by IE to install an unrestricted ActiveX control because a banner ad wanted them to "punch the monkey". Do you really think they're going to think about the security of a touch sensor? Now take it one step further and imagine a government spy agency wants to intercept phones and replace parts. (In fact I'm sure it is already happening).

slavik81 11y ago
Couldn't an unscrupulous repair shop just install an event logger in the screen to get the password and skip this whole touchid business? Or even give you back a different phone that just looks like yours and requests your password? Fundamentally, I feel the real question is who gets to decide who I trust. I want to choose for myself.

illumin8 11y ago

Even if someone guesses my PIN, I still don't want them to be able to get a copy of my fingerprint sensor data. Who knows how many multi-factor auth systems will use fingerprints in the future? Stolen fingerprint data could become the next SSN that people use to steal identities.

deleted 11y ago
[deleted]
m4x 11y ago
It seems unlikely that any sensible system would use fingerprint data for security, given how easy it is to spoof. You leave your fingerprints everywhere and can't protect them once you've left the area. Authenticator + smart phone is not ideal but it's still better than fingerprints. It's harder to steal a phone from somebody, while it's almost impossible to prevent the theft of your fingerprints.