3 ms·
I would hope that they simply save a hash of the fingerprint with a reasonable level of collision built in to make it difficult to tie a hash to a single person
by sdoowpilihp 13y ago
I would hope that they simply save a hash of the fingerprint with a reasonable level of collision built in to make it difficult to tie a hash to a single person's fingerprint (maybe ~10 people would have that hash?). I would imagine they could then use some sort of secret tied to the device id and hash pair to positively identify to the server.
edit for clarity
- tiziano88 13y agoThat's not how fingerprint scanners normally work I'm afraid...
- swamp40 13y agoSo there are two things going on here. 1)They said the detection gets better every time you use it. So my guess would be that multiple versions of the raw fingerprint data are stored inside the A7 chip. (That information never leaves the chip.) 2) You can use your fingerprint to authenticate apps like iTunes, as well as third party apps. For this, yes I am sure they will use some hash that cannot rebuild the fingerprint.
- hershel 13y agoFor 2, the apps have no reason to see a fingerprint hash, only an authenticated identity.
- swamp40 13y agoHow does it work now when you have to type in your iTunes password to authorize an in-app purchase? I thought the password got hashed and sent out to Apple's servers to authenticate? If so, wouldn't a new fingerprint based password have to do the same thing?
- hershel 13y agoI think they would implement a password manager, and instead of a master password ,they'll use fingerprints/fingerprints-hash