3 ms·
That doesn't prevent a malicious FaceID chip from recording and replaying sensor output, allowing a backdoor to unlock the phone, or a variety of other attacks.
by mirashii 5y ago
That doesn't prevent a malicious FaceID chip from recording and replaying sensor output, allowing a backdoor to unlock the phone, or a variety of other attacks.
There's a security guide that talks more about what the threat model is and where exactly the encryption and trusted communications happen. https://support.apple.com/guide/security/touch-id-and-face-id-security-sec067eb0c9e/1/web/1 https://support.apple.com/guide/security/touch-id-and-face-i...
- tata71 5y agoThreat models: what are they, how do they work?
- smoldesu 5y agoIf someone has physical access to your iPhone, it's game over. The US government holds your decryption keys, and there are third-parties that sell exploit kits that are a lot cheaper than spoofing some encrypted I2C interface (see: Greykey).
- dghlsakjg 5y agoIf someone has access to the inside of your phone, where they can micro-solder a custom chip in, they are capable enough that face-id was never going to slow them down. If you believe that you are the target of such a threat actor, you probably aren't keeping much on your phone. I would assume that if you are under that kind of threat, you don't keep secrets on a device that isn't airgapped.