3 ms·
Because we already know from long experience that most people don't have the patience or capability to answer security questions. The reality is that an unscru
by xenadu02 11y ago
Because we already know from long experience that most people don't have the patience or capability to answer security questions.
The reality is that an unscrupulous repair shop will just answer yes to the prompt (or tell the user to answer yes).
People clicked "install" when prompted by IE to install an unrestricted ActiveX control because a banner ad wanted them to "punch the monkey". Do you really think they're going to think about the security of a touch sensor?
Now take it one step further and imagine a government spy agency wants to intercept phones and replace parts. (In fact I'm sure it is already happening).
- slavik81 11y agoCouldn't an unscrupulous repair shop just install an event logger in the screen to get the password and skip this whole touchid business? Or even give you back a different phone that just looks like yours and requests your password? Fundamentally, I feel the real question is who gets to decide who I trust. I want to choose for myself.