4 ms·
Maybe this is a silly question, but does anyone know how secure the TouchID on the iPhone is compared to the 4 digit pin? I remember from a comment in the Andro
by CountSessine 11y ago
Maybe this is a silly question, but does anyone know how secure the TouchID on the iPhone is compared to the 4 digit pin? I remember from a comment in the Android source that the android 5 face recognition is about equivalent to a 3 digit pin. Is TouchID more secure or less secure than the 4 digit pin?
Is it more tractable or less tractable for someone to brute-force the 4 digit pin than the TouchID? I.e. if someone wanted to get into my phone, and they removed the official TouchID sensor and now it falls back on a 4 digit pin, does that do them any good?
I wonder if I could get the old behaviour back - if someone was tampering with my phone by removing the sensor, is there any way of bricking the phone until I can get it to an apple store?
- spacehome 11y agoThe problem with TouchID against even a moderately sophisticated attacker is that you leave fingerprints everywhere, including, say, on the phone itself.
- CountSessine 11y ago:-) I remember an episode of macgyver where macgyver gets past a handprint scanner by sprinkling baking soda over it; it adhered to the oil left on the scanner by the previous user and he got in.
- HappyTypist 11y agoFYI, it's slightly difficult to brute force the touch ID, because the secure enclave will wipe the derived PIN key (that it holds in internal memory, after receiving a signed message from the touch id sensor) in a reboot or after 48 hours.
- MBCook 11y agoOr a certain number of incorrect attempts.
- deleted 11y ago[deleted]
- MBCook 11y agoThe white paper Apple released two years ago said this: > Touch ID can be trained to recognize up to ve di erent ngers. With one finger enrolled, the chance of a random match with someone else is 1 in 50,000. However, Touch ID allows only ve unsuccessful ngerprint match attempts before the user is required to enter a passcode to obtain access. So that's at least 4 digits. Newer devices like the 6 series and 6s series may have better sensors.
- morgante 11y agoSomething seems to be wrong with your keyboard. The quote, in English: > Touch ID can be trained to recognize up to five different fingers. > With one finger enrolled, the chance of a random match with someone else is 1 in 50,000. > However, Touch ID allows only five unsuccessful fingerprint match attempts before the user is required to enter a passcode to obtain access.
- CountSessine 11y agoInteresting ... So apple was falling back on the 4 digit pin anyways when you failed the touch ID. So it seems fair to say that this change doesn't compromise the security of the device at all.