4 ms·
> And I don't see people complaining about the state of home security... Home security is a really poor analogy. * Attacking everybody's house at once is not
by solatic 9y ago
> And I don't see people complaining about the state of home security...
Home security is a really poor analogy.
* Attacking everybody's house at once is not scalable, unlike attacking many people's electronic devices at once. Furthermore, defending against a SWAT team armed with a search warrant is nigh impossible, no matter what lock you put on your front door.
* The contents of most people's houses is far more weighted to "things which would be a hassle to file with insurance to replace" and less "it would ruin my life if this got into the wrong hands", and their strategy for home defense is weighted as such.
* Many people whose strategy for home defense (well, in the US) is more serious, will weigh more towards weapons / guns and less to the actual locks on the doors. What would a digital equivalent be? A prick of poison for anybody who picks up a phone which doesn't belong to them? The analogy totally breaks down in context.
- btown 9y agoThe analogy is one of defense in depth: if you're serious about security, you can use memorized & typed secondary passwords on secure apps, such as secure notes in 1Password, or an app like https://guardianproject.info/apps/pixelknot/ https://guardianproject.info/apps/pixelknot/ that would steganographically encode secure notes into otherwise normal photos, potentially with independent passwords for complete deniability. A locked door and a face-locked iPhone are only the first line of defense, and are largely for convenience's sake in both daily use/as a deterrent and in the case of physically being distant from your property. The "guns" are entirely independent.
- splintercell 9y agoI am not a huge fan of Steganography in images. There are far too many services out there which take the liberty of modifying or re-encoding your images to a different format for various reasons. Is there a lossless medium which can be used for steganography?
- anko 9y agoIf it's lossless, then where do you hide the message? In "comment" sections? Not very well hidden. How many formats are there where you can intentionally encode something with meaningless characters?
- breatheoften 9y agoHow do you attack everyone’s physical camera at once? Sure you could attack other implementation details of the device remotely and “at once” — but how is that relevant to the faceid use case?
- Renaud 9y agoI believe solatic means that once a method to crack Face ID is found, all devices are suddenly at risk.
- osteele 9y agoLike the dissemination of knowledge about bump keys fifteen years ago, which put a large number of homes suddenly at risk.
- gtsteve 9y agoIndeed. However it seems likely to me that an attack could be resolved with a software update as the decision to unlock is performed entirely by software (as far as I can tell). It's a bit harder to upgrade your front door lock in this way.
- baddox 9y ago> The contents of most people's houses is far more weighted to "things which would be a hassle to file with insurance to replace" and less "it would ruin my life if this got into the wrong hands", and their strategy for home defense is weighted as such. Except for, you know, family members.