10 ms·
iOS 11 has a feature to temporarily disable Touch ID
- StavrosK 9y agoWouldn't that be an anti-cop button, if you're worried that the police will force you to use your fingerprint?
- TurkTurkleton 9y ago"Cop button", by analogy with "boss key": https://en.wikipedia.org/wiki/Boss_key https://en.wikipedia.org/wiki/Boss_key
- StavrosK 9y agoMakes sense, thanks.
- Others 9y agoThis title is so misleading... It makes it sound like this is a button for cops to get into a phone, but it's really a button you press to turn off Touch ID until a password is entered.
- sctb 9y agoWe've removed ‘cop button’ from the title, which is ridiculous.
- leereeves 9y ago> With fears over access to devices at border control points around the world, this quick trick will at least prevent Touch ID from being used until a passcode is entered. This won't help much at borders. Customs will require you to unlock the phone before you can enter the country (or just refuse to allow you to bring the phone, if you're a citizen).
- jasonjei 9y agoJust an idea, if you're really afraid of customs checking your phone, couldn't you bring 2 phones, and hide your real phone deep in your luggage, and bring a moderately used/old smartphone with you? I feel like customs only wants to see a phone, and as long as you present them what they want to see...
- xyzzy_plugh 9y agoConsider that if they discover this, then you look much more suspicious, and you're going to have a harder time explaining yourself.
- celticninja 9y agobetter yet just bring one phone, wipe it to factory settings before the flight, when you land log into dropbox and restore from backup. No hiding phones (makes it look really suspicious) and easy to comply with their requests.
- eugeniub 9y agoI too, love handing all of the contents of my phone to Apple.
- mikestew 9y agoThat’s nice. What does that have to do with the comment to which you replied? Your comment sounds like something an Apple fanboy would say, who’s just looking for an excuse to inject the name of their favorite company.
- jclardy 9y agoUhh, he is bashing Apple...I guess because he assumes iCloud backup is the only way to backup an iPhone? You can back up an iPhone locally with iTunes. Unless you are afraid they will go through your laptop to find your phone backup.
- tillinghast 9y agoThe article title is suspiciously ambiguous. It's almost as if they _wanted_ to encourage outrage and motivate people to click through...
- amelius 9y ago> The new iOS 11 feature is even more relevant when you consider that Apple is expected to introduce face unlocking with the next iPhone. I read that as "fake unlocking". Which would be a really cool option: a cop or TSA tries to unlock your phone but gets instead a sandboxed environment which makes them think they actually unlocked the phone.
- tyingq 9y agoAndroid has that via profiles. https://img.gadgethacks.com/img/16/39/63590794005007/0/android-basics-set-up-multiple-user-accounts-same-device.w1456.jpg https://img.gadgethacks.com/img/16/39/63590794005007/0/andro... I imagine that not many TSA people would think to navigate there and switch it out of the guest profile. No need to lock it, just switch profiles and leave it unlocked.
- kevindqc 9y agoThat would be nice, something like user accounts. Would be useful not just for this. You have one iPad for the family? You probably don't care about those games for 2 years old when you are using the phone yourself - just switch to your account which doesn't contain these apps! Unless that's already a thing I'm not aware (now using Android)?
- Frank2312 9y agoIt is already a thing on Android.
- gruez 9y ago>Which would be a really cool option: a cop or TSA tries to unlock your phone but gets instead a sandboxed environment which makes them think they actually unlocked the phone. after a few months of that being popular, TSA will institute a policy where the agent will ask a standard question of "are you using a decoy account or otherwise trying to hide the true contents of your phone" every time they inspect a phone. answer yes, they ask for the real account, answer no, and you committed a felony by lying.
- xoa 9y agoI guess this is better then nothing as a quick fix, a very mild improvement over simply shutting off/rebooting the phone. But Apple has the elements in place for much, much more effective methods such as a touch-based coercion code system. While in current stock iOS any finger registered with Touch ID is equivalent from a user's perspective, internally all of them are registered as separate events. Via jailbreaking it has therefore been possible to have different actions triggered by different fingers, which allowed a normal Touch ID action to additionally run any script, reboot the phone, or even wipe the phone, with zero apparent trigger by the user. Now that jailbreaking is mostly dead that's no longer an option, but Apple could of course implement this even better, with both Touch ID and actual alternative passcode options. Apple could offer not merely disable/wipe options, but more transparent hiding (via encryption) of apps and data a user deems sensitive. This is one area where the extremely heavily sandboxed nature of iOS and hardware key system offers a significant potential advantage not merely to infosec but to opsec as well. It is far more feasible to hide sensitive data without leaving fingerprints or shadows in other apps or the system itself. Temporal and geographic location conditions could also be taken into account as possible triggers in intuitive and user friendly ways. Of course, if bandwidth is known to be sufficient on each end of a trip, a "high risk area transit mode" that completely clears the device of all data except user-designated travel essentials (wallet, ticket information and such) could be another option. If WiFi sync/restore was fixed to be more reliable then users and organizations could even do that themselves via VPN back to their own core systems. At any rate I hope Apple gets more aggressive here, the potential is exciting and they're in a real position to do a lot of good for personal privacy, and critically in a way that's highly accessible to even non-technical users. This isn't even remotely just about corrupt or overbearing law enforcement either, in many parts of the world "high risk" applies to a lot of other trips where one might encounter criminal elements. Just as one wouldn't carry tens of thousands in cash through those areas or even debit cards with access to the same, carrying any other device that's a close equivalent is a bad idea, yet a smartphone is also a powerful safety and communication tool at the same time. If effectively it can use temporal, geographic and user-memory stored conditions to change itself on the fly that'd be great.
- cmsimike 9y agoThere is an option in iOS to allow you to use TouchID after you've logged into your phone (so authenticating inside of apps, or using TouchID for the app store) but to disable TouchID logging into your phone (so you're forced to use the passcode). I've had this on since I discovered it and have been happy. My concern around something like the what the article mentions (and the other methods like force restarting your phone (I am not a lawyer so might not be an actual concern)) would be any charges of destruction of evidence (https://www.law.cornell.edu/uscode/text/18/1519 https://www.law.cornell.edu/uscode/text/18/1519) or otherwise getting caught up in a law where they could use the fact that you purposely disabled TouchID on your phone after you have been caught or something.
- daenney 9y agoThere's no destruction of evidence though, they just can't access it without getting the password from you. Which is pretty much the same thing as when they'd need you to unlock your computer etc. If you throw your phone on the ground, drive over it with a truck and set it on fire, sure. But all you're doing here is ensuring they can't grab your fingerprints and unlock the device against your will and without a warrant.
- sbierwagen 9y ago"Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both." Just because it's not destruction of evidence doesn't mean you can't go to jail for making the evidence hard to get at.
- cmsimike 9y agoExactly - reminds me of the person who is being held indefinitely due to not giving up the encrypted hard drive password. https://arstechnica.com/tech-policy/2017/03/man-jailed-indefinitely-for-refusing-to-decrypt-hard-drives-loses-appeal/ https://arstechnica.com/tech-policy/2017/03/man-jailed-indef...
- ksk 9y agoWhile its great that Apple continues to focus on users, realistically what percentage of the user base even requires this feature? Okay sure, maybe this is just whining about stuff I don't personally care about. But, if you have a finite development budget, why not focus even more on trimming the OS so it doesn't slow down after every update, or tracking edge case bugs (which are rare, but when they do occur, their impact is very high) like the music library disappearing from the phone(I was affected by this bug twice) at a seemingly random time.
- kstrauser 9y agoI would be willing to bet that Touch ID, OS optimization, and iTunes are managed by separate teams.
- puzzle 9y agoOn Android, you can do the same by running Google's Find My Device app and locking the phone. It will then require a password/passcode to unlock. It feels a bit funny to lock the very device you are holding in your hands, but it's simple and effective.
- RKearney 9y agoFind my iPhone works the same way. You can put a device in "Lost Mode" and it will lock the device, enable low power mode, and disable TouchID. The problem is, once you're device is sized I'm fairly certain it's standard operating procedure to put the phone in a faraday cage or airplane mode, rendering remote activation of this feature useless.
- puzzle 9y agoI meant that you do it on the device itself, not remotely. The article is about temporarily disabling fingerprint unlocking and that's what you can achieve with the Android app (does Apple's let you lock the device you're holding in your hands? It might have a sanity check that only allows you to do it with your other devices). The alternative would be to remove manually all your fingerprints, then readd them later.
- dkonofalski 9y agoYou can do this with Find My iPhone too. The issue in question, though, makes both of those useless as you'd need to unlock the phone, open the app, navigate to the device in question, and then lock it. If you're in the presence of an attacker or other intruding force, it's doubtful they would let you continue use of your phone in that manner. Tapping the power button can be done subtly and quickly enough to still make it useful.
- pasbesoin 9y agoFinally. I can't believe it's taken this long. I can't be the only one who thought this would be an obvious, and increasingly needed, feature. Hope Google steps up, with Android. And that it is a feature that manufacturers and carriers cannot bury nor turn off.
- arrty88 9y agoIf you want to disable touch ID on the fly as is today (iOS 10), just use a finger that it doesn't recognize a couple of times in a row and then "Oops it wants my full passcode now"
- madvoid 9y agoI just tried this. On iOS 11 on my iPad, putting the wrong finger three times in a row prompts for a passcode, but, you can hit cancel and then use a correct finger and it will still unlock. So I don’t know if that helps you because it doesn’t require a password after three incorrect tries, just prompts you for one.
- jacobwil 9y agoFive incorrect/bad fingerprint reads will require passcode.
- will_brown 9y agoOn 08/05/17 I was kidnapped at gun point and at one point forced to turn over my iPhone and on two occasions had to provide the gunman my passcode. I learned about tapping the power button 5x's but still don't know what would have occurred and if such a function would have endangered by life (I believe it triggers a emergency services call, but that could have tipped off the gunman if he heard an voice asking "911, what's your emergency?" From the phone). So I believe the following would have been useful: an alternate passcode that would have unknowingly triggered my location and activated the mic to emergency services without the gunman being aware.
- solotronics 9y agowow, glad you are ok. could you please elaborate? Do you live in the States? Would you mind talking about why you were kidnapped and what preventative measures you will take going forward? I am involved in cryptocurrency and worry about this quite a bit but luckily I live where citizens can concealed carry so that at gives me a fighting chance.
- nerdponx 9y agoNot the same poster but I was robbed last year (but not kidnapped...) and something similar happened. They told me to unlock the phone, then kept me there while they ran a factory reset on it. They had zero interest in my personal data -- they just wanted to sell the phone.
- will_brown 9y agoMy kidnapper used my phone to find an ATM/my bank (maybe other reasons too), and you couldn't make this up but Apple Maps gave him a bank location like 20 miles away and I got my phone back by telling the frustrated attacker I would find a closer bank, it was shortly after getting my phone that I made my escape.
- deleted 9y ago[deleted]
- 9y ago
- IgorPartola 9y agoYou know it occurred to me while on a trail run the other day, that TouchID is actually a very interesting feature in my case. I bring my phone for three reasons: 1. Music. But I can get that from a much much smaller device. 2. GPS. I use RunKeeper. But I could totally use a GPS watch, or even a pedometer for this. I run the same trails after all and know the distances. 3. For emergencies. This is the big one. If I trip and break or sprain something, I want to be able to call for help. Even scarier, if I pass out suddenly and someone finds me, I want them to call for help. It occurred to me that in that third category, if I pass out and someone finds me with my phone (and if they don't just rob me blind and leave me), they can use my thumb to unlock my phone, then call or text one of my contacts. I don't need to be conscious for that. P.S.: How great would have Pebble Core been? And why hasn't anyone else tried it? Come on Apple, give us a cell-network connected, GPS equipped iPod Nano!
- kylec 9y agoP.S.: How great would have Pebble Core been? And why hasn't anyone else tried it? Come on Apple, give us a cell-network connected, GPS equipped iPod Nano! According to the rumors the next Apple Watch will have LTE, so that would seem to be the product you're asking for
- Simon_says 9y agoIf you're unconscious, the only contact that needs to be called is emergency services.
- IgorPartola 9y agoI mean of course. But if I am 3 miles into a wooded trail, they will be waiting a while. Aside from CPR I'd such is needed, not much to do. I'd certainly appreciate a call or a message being sent in that case.
- retromario 9y agoRegarding point 3, Apple has implemented something called Emergency Medical ID which basically lets you set a couple of visible contacts to reach in case of emergency: http://osxdaily.com/2017/01/07/use-medical-id-for-emergency-iphone/ http://osxdaily.com/2017/01/07/use-medical-id-for-emergency-...