4 ms·
People were annoyed enough by 4 digits that Touch ID was a major selling point. 6 words isn't gonna happen. But you already can use such a password with an iPho
by superuser2 11y ago
People were annoyed enough by 4 digits that Touch ID was a major selling point. 6 words isn't gonna happen. But you already can use such a password with an iPhone, and if you do, the attack the FBI is attempting won't work. Software freedom doesn't enter into it.
What should (and might) happen is Apple's model being amended to also require a code-signing key held by the user, encrypted with the rest of the phone. Apple could do this in its closed-source model, and Free Software wouldn't necessarily do that. Proper security design here really has nothing to do with whether the software is free.
- mindslight 11y agoSurprise surprise, pop culture is based on laziness. Free software generally relies wholly on complexity theoretic security - so that it can be completely software based, as well as the author lacking any special privilege when the source is released. Computationally security necessitates a certain minimum amount of entropy. For UI reasons, Apple would like to skimp on the required entropy, and thus employs additional non-complexity-based means of security. While this provides security for a casual user against a casual attacker, it unfortunately creates a juicy target for USG to fixate on, as in the current proceedings. It would have been more responsible for Apple to have designed their system so that low entropy passcodes were directly crackable by USG, rather than leaving themselves in a privileged position they can be compelled to use.