3 ms·
If the flaws can expose passwords, there's no particular reason that it couldn't also expose biometric data. You use can hash it and put it in a secure enclave
by Angostura 9y ago
If the flaws can expose passwords, there's no particular reason that it couldn't also expose biometric data. You use can hash it and put it in a secure enclave - but you could do that with passwords.
- 3pt14159 9y agoYou could keep a private key in a secure enclave and use it to sign each request or even just signing a password with a nonce. Though if your attacker has root they can change what is on the screen anyway.