4 ms·
While biometrics are imperfect (because you can't change or even hide the key), it's not quite as bad as you make out. On iOS at least, it gains affirmative co
by scoopertrooper 4y ago
While biometrics are imperfect (because you can't change or even hide the key), it's not quite as bad as you make out.
On iOS at least, it gains affirmative consent by you double clicking a button on the side. It also refuses to recognise your face if your eyes are closed.
- pabs3 4y agoThe attacker could be pressing the button, or even opening your eyes for you :)
- n8cpdx 4y agoIt’s pretty strict and won’t authenticate if I look too tired, so I think you’d have to be pretty careful about how you tape the unconscious victim’s eyes (a conscious victim would just look away from the screen) to fool it. And if someone has full physical control over you such that they can open your eyes without consent, do you really care if they can unlock your phone? Your life is in their hands at that point anyway. You have to assume a persistent attacker with physical access will be able to crack the device regardless.
- pabs3 4y agoI'm thinking children or spouses, you may be able to trust them not to murder you in your sleep, but accessing your device while you sleep to be able to play some games or read your texts is something they would probably do.
- scoopertrooper 4y agoYou must be a deep sleeper! I'm pretty sure I'd be awoken if someone attempted to pry my eyes open.
- nighthawk454 4y agoWrenches are cheaper https://xkcd.com/538/ https://xkcd.com/538/ It only works if you're close, alive, your eyes are both open, and looking right at it. I doubt that degree of specific physical attack is in most people's threat model. It's only backing a 4/6 digit pin for most people anyway. Realistically, it's not the weakest link.
- reayn 4y agoIn such a situation I'd assume you have much more important things to worry about...