2 ms·
I'm inclined to agree that it's an improvement over the status quo for people that didn't use passcodes from before. I do trust Apple more than many other enti
by K0nserv 11y ago
I'm inclined to agree that it's an improvement over the status quo for people that didn't use passcodes from before.
I do trust Apple more than many other entities and as you say they don't have a database with fingerprints. Further the secure enclave is definitely a secure piece of engineering.
As evident by the linked article though the problem isn't Apple the problem is all the other databases that will have your fingerprints. As Troy says in the article
> The values within there can be quite detailed and I’ve no reason to think that this isn’t indeed legitimate print data uniquely and biologically identifying the owner. You don’t get to reset that stuff once it’s been released into the wild!
Once your fingerprints leak somehow there's no way to reset or change them. To me at least is seems like a really poor idea to use something with those properties as passwords.
- Vraxx 11y agoYeah, wow. That's an aspect I've never considered before. I suppose because I figured they would need my actual fingerprint to crack the system, but if you have the values for all the "basis vectors" of the fingerprint that are stored, one could theoretically bypass the sensor and feed the proper sensor output to the authenticating machine. The issue grows larger as this method of authentication grows in popularity.