4 ms·

This doesn't explain why Linux doesn't communicate with the secure enclave. Edit: I suspect closed-source hardware drivers, or collaboration with manufacturer i

This doesn't explain why Linux doesn't communicate with the secure enclave. Edit: I suspect closed-source hardware drivers, or collaboration with manufacturer is needed - so no fault on the Linux team, but still, an explanation as part of the article would be welcome. As an aside, Appleland isn't the promised land either. Apple laptops with a fingerprint reader lack the interface to be unlocked with depth cameras, like any Windows Hello certified camera. This means biometric authentication requires another connected fingerprint reader when the lid is closed. Apple phones on the other hand have the opposite problem. They have a depth camera and can use your face to unlock, but lack the hardware for fingerprint unlocking. This means you have to lift them up and point them at your face while other phones have built-in fingerprint readers beneath their screens.

ho_schi 3y ago
The cameras - i.e. FaceID - on the iPhone are unlocking the iPhone prematurely (to early). Why? Because they unlock the device in advance before you request it by action. Watch the small lock. It unlocks before you swipe up. Example? You ask a stranger to take a photo of your group. I think a normal situation. Not an issue with an iPhone SE (1st Gen - 3rd Gen). Just open the camera app from the lock screen and pass it, the photographer just needs to know “red button” and cannot access anything. Same with FaceID? You’re likely in trouble because you probably didn’t covered the front camera while passing the smartphone - it is completely unlocked because FaceID unlocks the device as soon as it recognizes the you. Apple has broken a security promise which we all know and expect. And usually the screen turns on when the phone is picked up (FaceID starts searching) and even if not - by habit many will touch the side-button and launch the camera app from the lock—screen. Workaround? Turn FaceID off. Or always remember not to look at the device and cover cameras with your fingers (FaceID can be quick). Guess what? Only the first one works for me. Previously? Stealing an iPhone handed over for photography was useless. Investigating private data was not possible. Please note that an unlocked iPhone allows access to all data. And resetting your passwords via E-Mail. I don’t know if the E-Mail is enough to reset the Apple ID. I’m afraid FaceID was considered too slow by Apple and they decided to make it “feel faster” by scanning for the owner already before the owner swipes up to unlock. It could be secure - only unlock if the user actually requests it by swiping up. The tiny “lock icon” also part of the problem. Within iOS itself a use of FaceID is much more obvious, users note when it is happening. PS: GNOME and seahorse are nice - when you login in with password it is automatically unlocked. It handles changes of the password also through the shell well, it recognizes the mismatch and ask only once for the old password. Maybe the reason why I didn’t feel the need for “password managers”.
- lloeki 3y ago
  > Or always remember not to look at the device and cover cameras with your fingers (FaceID can be quick) Picture this: - Owner hands over phone locked (whether or not in camera) - Photographer sort of takes its time, acting not too sure about themselves to divert attention while subtly manipulating device so that screen shuts down (wait for screen sleep, or press power button if in camera), claims "oh I made a mistake / screen has shut down" or something to that effect all the while smoothly presenting device as if both demonstrating the fact and asking for help, facing it towards owner so that they can look, yet quickly presses power button which kicks in FaceID which provides haptic feedback as a cue to swiftly turn it around, swipe up, and keep a finger on screen. Photographer runs away, phone is unlocked. What works: press power button five times, dismiss emergency screen, and only then hand it over. This invalidates authentication and requires pin to unlock (think `sudo -k`).
  - lathiat 3y ago
    Another option is to use the “Guided Access” accessibility mode which lets you lock the phone into the current app, requiring a password/optionally FaceID to unlock it. Can be activated with a triple click on the power/home button. It’s also great to use with kids to stop them switching apps. It’s effectively a kiosk mode.
  - 10u152 3y ago
    You don’t need to press it 5 times, just long press vol down and power, until the shutdown screen comes up and dismiss it.
    - lloeki 3y ago
      Ah, true; TIL. Both are equally quick to me, although I do personally find 5 press to be slightly easier.
      - pjerem 3y ago
        The thing is you can configure the 5 press to : - emit a loud alarm - call the emergency number - send messages to your emergency contacts And yes it also locks the phone. But that’s not something I would like to use just to get photographed by a stranger ;)

ho_schi 3y ago

The cameras - i.e. FaceID - on the iPhone are unlocking the iPhone prematurely (to early). Why? Because they unlock the device in advance before you request it by action. Watch the small lock. It unlocks before you swipe up. Example? You ask a stranger to take a photo of your group. I think a normal situation. Not an issue with an iPhone SE (1st Gen - 3rd Gen). Just open the camera app from the lock screen and pass it, the photographer just needs to know “red button” and cannot access anything. Same with FaceID? You’re likely in trouble because you probably didn’t covered the front camera while passing the smartphone - it is completely unlocked because FaceID unlocks the device as soon as it recognizes the you. Apple has broken a security promise which we all know and expect. And usually the screen turns on when the phone is picked up (FaceID starts searching) and even if not - by habit many will touch the side-button and launch the camera app from the lock—screen. Workaround? Turn FaceID off. Or always remember not to look at the device and cover cameras with your fingers (FaceID can be quick). Guess what? Only the first one works for me. Previously? Stealing an iPhone handed over for photography was useless. Investigating private data was not possible. Please note that an unlocked iPhone allows access to all data. And resetting your passwords via E-Mail. I don’t know if the E-Mail is enough to reset the Apple ID. I’m afraid FaceID was considered too slow by Apple and they decided to make it “feel faster” by scanning for the owner already before the owner swipes up to unlock. It could be secure - only unlock if the user actually requests it by swiping up. The tiny “lock icon” also part of the problem. Within iOS itself a use of FaceID is much more obvious, users note when it is happening. PS: GNOME and seahorse are nice - when you login in with password it is automatically unlocked. It handles changes of the password also through the shell well, it recognizes the mismatch and ask only once for the old password. Maybe the reason why I didn’t feel the need for “password managers”.

lloeki 3y ago
> Or always remember not to look at the device and cover cameras with your fingers (FaceID can be quick) Picture this: - Owner hands over phone locked (whether or not in camera) - Photographer sort of takes its time, acting not too sure about themselves to divert attention while subtly manipulating device so that screen shuts down (wait for screen sleep, or press power button if in camera), claims "oh I made a mistake / screen has shut down" or something to that effect all the while smoothly presenting device as if both demonstrating the fact and asking for help, facing it towards owner so that they can look, yet quickly presses power button which kicks in FaceID which provides haptic feedback as a cue to swiftly turn it around, swipe up, and keep a finger on screen. Photographer runs away, phone is unlocked. What works: press power button five times, dismiss emergency screen, and only then hand it over. This invalidates authentication and requires pin to unlock (think `sudo -k`).
- lathiat 3y ago
  Another option is to use the “Guided Access” accessibility mode which lets you lock the phone into the current app, requiring a password/optionally FaceID to unlock it. Can be activated with a triple click on the power/home button. It’s also great to use with kids to stop them switching apps. It’s effectively a kiosk mode.
- 10u152 3y ago
  You don’t need to press it 5 times, just long press vol down and power, until the shutdown screen comes up and dismiss it.
  - lloeki 3y ago
    Ah, true; TIL. Both are equally quick to me, although I do personally find 5 press to be slightly easier.
    - pjerem 3y ago
      The thing is you can configure the 5 press to : - emit a loud alarm - call the emergency number - send messages to your emergency contacts And yes it also locks the phone. But that’s not something I would like to use just to get photographed by a stranger ;)