7 ms·

It _always_ depends on your threat model. Most people need protection from snooping family members, or people who find your phone if you lose it. For these use

It _always_ depends on your threat model. Most people need protection from snooping family members, or people who find your phone if you lose it. For these use cases Face/Touch ID both work great. If you are trying to secure your data from the NSA, well you have probably already lost, but by all means, turn off Face ID.

natch 8y ago
"for many users" I think the OP is signaling they were already aware of the threat model point before your comment.
southerndrift 8y ago
How do you protect against family members who have enough pictures of you to create a 3D printed model of your head [1]? [1]: https://www.wired.co.uk/article/hackers-trick-apple-iphone-x-face-id-3d-mask-security https://www.wired.co.uk/article/hackers-trick-apple-iphone-x...
- graeme 8y ago
  Was that ever confirmed? The article you link raises doubts about it, and I could find no followup when searching, just contemporary press. Here's a contemporary article doubting it: https://arstechnica.com/information-technology/2017/11/hackers-say-they-broke-apples-face-id-heres-why-were-not-convinced/ https://arstechnica.com/information-technology/2017/11/hacke...
- threeseed 8y ago
  After 10 attempts it's going to wipe the phone. Given how sensitive FaceID is I don't think this is a realistic bypass approach. Not that it was even confirmed anyway.
- sbuk 8y ago
  If they are that desperate, you’ve got bigger problems.
- Skunkleton 8y ago
  > How do you protect against family members who have enough pictures of you to create a 3D printed model of your head [1]? With therapy.
philwelch 8y ago
> If you are trying to secure your data from the NSA, well you have probably already lost, but by all means, turn off Face ID. If you're trying to secure your data from the NSA, carry a flip phone and turn it off and throw it in the freezer before you have any sensitive in-person conversations. Also have all of your sensitive in-person conversations right next to a loud white noise generator (i.e. on the seashore). And memorize all of your confidential information. And always carry a highly reliable suicide method in case you get captured and interrogated. I'm not being funny here, these are literally the precautions that people take against state-level espionage.

natch 8y ago

"for many users" I think the OP is signaling they were already aware of the threat model point before your comment.

southerndrift 8y ago

How do you protect against family members who have enough pictures of you to create a 3D printed model of your head [1]? [1]: https://www.wired.co.uk/article/hackers-trick-apple-iphone-x-face-id-3d-mask-security https://www.wired.co.uk/article/hackers-trick-apple-iphone-x...

graeme 8y ago
Was that ever confirmed? The article you link raises doubts about it, and I could find no followup when searching, just contemporary press. Here's a contemporary article doubting it: https://arstechnica.com/information-technology/2017/11/hackers-say-they-broke-apples-face-id-heres-why-were-not-convinced/ https://arstechnica.com/information-technology/2017/11/hacke...
threeseed 8y ago
After 10 attempts it's going to wipe the phone. Given how sensitive FaceID is I don't think this is a realistic bypass approach. Not that it was even confirmed anyway.
sbuk 8y ago
If they are that desperate, you’ve got bigger problems.
Skunkleton 8y ago
> How do you protect against family members who have enough pictures of you to create a 3D printed model of your head [1]? With therapy.

philwelch 8y ago

> If you are trying to secure your data from the NSA, well you have probably already lost, but by all means, turn off Face ID. If you're trying to secure your data from the NSA, carry a flip phone and turn it off and throw it in the freezer before you have any sensitive in-person conversations. Also have all of your sensitive in-person conversations right next to a loud white noise generator (i.e. on the seashore). And memorize all of your confidential information. And always carry a highly reliable suicide method in case you get captured and interrogated. I'm not being funny here, these are literally the precautions that people take against state-level espionage.