4 ms·
Most of this risk is mitigated with finger print auth like Touch ID. Though, nothing is perfect.
by givinguflac 10y ago
Most of this risk is mitigated with finger print auth like Touch ID. Though, nothing is perfect.
- fnordfnordfnord 10y agoFingerprint auth exposes you to court-ordered unlocking though.
- knodi123 10y agonot necessarily, if you use several sequential fingerprints in a certain order, and have a hard lockout after X failures. My phone knows 6 of my fingerprints already; shouldn't be hard to get that additional level of "something you know" in addition to "something you are".
- knodi123 10y agoI wonder why someone would downvote this without reply? It's a perfectly reasonable suggestion, would be trivial to implement, and would be both a password and a biometric. That's two-factor authentication. Somebody's a real humbug.
- Shivetya 10y agowith Apple's rumored removal of a separate home button then multitouch unlock / swipe unlock can become a thing. Then how do you prove the user enabled the feature? With one finger recognition they can just compel you to try each finger and it should work. Still manufacturers need to add distress recognition. use the wrong finger and it dumps all of them requiring pin only
- omginternets 10y agoBiometrics aren't cryptographically secure. You can't deterministically derive a key from biometric data. Moreover, you can't rotate your keys.
- taejo 10y agoActually you can: http://web.cs.ucla.edu/~rafail/PUBLIC/89.pdf http://web.cs.ucla.edu/~rafail/PUBLIC/89.pdf
- omginternets 10y agoCool! From my cursory reading, it doesn't seem like you can rotate keys, though.