5 ms·
Honestly, TouchID is better than what we have today; a 4 digit useless passcode. If somebody has to take a photo of my fingerprint off a glass surface to gain a
by nodesocket 13y ago
Honestly, TouchID is better than what we have today; a 4 digit useless passcode. If somebody has to take a photo of my fingerprint off a glass surface to gain access to my phone, so be it.
- leot 13y agoIt's not as useless as all that. Assuming Apple has properly used their key derivation function, and the phone locks you out after ~10 failed attempts, and there's no way to access a locked phone's data, then a four digit passcode is actually quite secure.
- nly 13y agoA KDF wouldn't help with a 4 digit PIN
- leot 13y agoWouldn't it? E.g., what if you did the derivation from the PIN in combination with a securely stored random salt (that could, as an added bonus, change every time you changed your key code)? That was, incidentally, what I meant by "properly used their KDF".
- nly 13y ago4 digit pin? I use a 12+ character alphanumeric password on Android.
- toddmorey 13y agoTo unlock your phone? Each time you need to use / check it?
- riffraff 13y agoI have a 5 year old iphone and 6 digit password. So one can be 100 times safer than grandparent without much effort. I presume longer codes are ok on iphones even today?
- _djo_ 13y agoiOS lets you choose between a 4 digit pin or an alphanumeric password of whatever length you want. The 4 digit pin is meant to be more convenient, but even then most smartphone owners don't use it. The point of TouchID was to have a more secure default for most than a 4 digit pin or, more commonly, no pin or password at all. Few people would be happy with having to enter a 12+ character alphanumeric password each time they wanted to use their phone, you're an outlier there.
- rsynnott 13y agoSure, a few people use long passwords on their phones (usually when forced to do so by corporate security policies. However, most don't, because it's impractical. Many don't even use a pin lock.