4 ms·
I am not sure I follow. (Edit: there is more to the threat model than the scenario that the device is being broken into outside of your possession. Consider ju
by rgovostes 7y ago
I am not sure I follow.
(Edit: there is more to the threat model than the scenario that the device is being broken into outside of your possession. Consider just a fake part that pretends to authenticate you but sends a fixed fingerprint image or embedding or whatever to your SEP. You wouldn’t know but someone else could get into your device.)
But each device has a unique encryption key that is implemented in hardware. The flash storage cannot simply be moved to a new device. Cloning the storage and the hardware key is assumed to be significantly harder (and more costly) than replacing the sensor with something similar-looking (see any number of Chinese knockoffs).
- AnthonyMouse 7y ago> Consider just a fake part that pretends to authenticate you but sends a fixed fingerprint image or embedding or whatever to your SEP. You wouldn’t know but someone else could get into your device. Which was the second point. They can replace the whole phone and you're in the same situation. Having two components authenticate each other just requires them to replace both. > The flash storage cannot simply be moved to a new device. Not the way they've designed it, but there is no security reason not to allow that once the phone has already been unlocked.