4 ms·

> Fingerprint scanning is absolutely better than a pass code How often can you change your fingerprint? I can change my pass code virtually an infinite number

by panzi 13y ago

> Fingerprint scanning is absolutely better than a pass code How often can you change your fingerprint? I can change my pass code virtually an infinite number of times. How often do you inadvertently leave your pass code in random places just by touching things? A good pass code is absolutely better than fingerprint scanning.

Osmium 13y ago
That's hyperbolic. How often can someone see your passcode over your shoulder? Or have it picked up by a security camera? Fingerprint scanning absolutely has advantages over pass codes. Security is all about trade-offs. This result was to be expected (in some form). What will be worry me is if the "secure enclave" where the fingerprint data is stored is cracked (and I wouldn't be surprised if that happens too eventually).
- ce4 13y ago
  Your point is moot. As soon as your fp is digitally available online. E.g.,the CCC has captured and published former german minister of the interior, Wolfgang Schäuble's fingerprint in 2008 [1]. This finger of him is not secure any more and readily available via a google image search. [1] http://www.h-online.com/newsticker/news/item/CCC-publishes-fingerprints-of-German-Home-Secretary-734713.html http://www.h-online.com/newsticker/news/item/CCC-publishes-f...
  - Osmium 13y ago
    Agreed: that's why I said it would be especially worrying if this "secure enclave" Apple talks about is cracked and if it's then possible to reconstruct fingerprints from the data inside. But unless that happens, the iPhone itself doesn't make my fingerprints any easier to leak; someone can already get them from everything I touch!
ce4 13y ago
Even worse: Other manufacturers will jump ship and this sort of device becomes omnipresent on smartphones. Probably, apps will get access to capture raw prints themselves at some time. Someone will start to store real and unhashed fp's in their database. As happening frequently with databases containing CC numbers (and even CC pins), that DB will eventually get copied and accessible on the net. Buying one's fp data will become possible at some point.
- MBCook 13y ago
  > Probably, apps will get access to capture raw prints themselves at some time. Any company that designs their hardware so this is possible deserves the suit they'll get.

by panzi 13y ago

Osmium 13y ago

That's hyperbolic. How often can someone see your passcode over your shoulder? Or have it picked up by a security camera? Fingerprint scanning absolutely has advantages over pass codes. Security is all about trade-offs. This result was to be expected (in some form). What will be worry me is if the "secure enclave" where the fingerprint data is stored is cracked (and I wouldn't be surprised if that happens too eventually).

ce4 13y ago
Your point is moot. As soon as your fp is digitally available online. E.g.,the CCC has captured and published former german minister of the interior, Wolfgang Schäuble's fingerprint in 2008 [1]. This finger of him is not secure any more and readily available via a google image search. [1] http://www.h-online.com/newsticker/news/item/CCC-publishes-fingerprints-of-German-Home-Secretary-734713.html http://www.h-online.com/newsticker/news/item/CCC-publishes-f...
- Osmium 13y ago
  Agreed: that's why I said it would be especially worrying if this "secure enclave" Apple talks about is cracked and if it's then possible to reconstruct fingerprints from the data inside. But unless that happens, the iPhone itself doesn't make my fingerprints any easier to leak; someone can already get them from everything I touch!

ce4 13y ago

Even worse: Other manufacturers will jump ship and this sort of device becomes omnipresent on smartphones. Probably, apps will get access to capture raw prints themselves at some time. Someone will start to store real and unhashed fp's in their database. As happening frequently with databases containing CC numbers (and even CC pins), that DB will eventually get copied and accessible on the net. Buying one's fp data will become possible at some point.

MBCook 13y ago
> Probably, apps will get access to capture raw prints themselves at some time. Any company that designs their hardware so this is possible deserves the suit they'll get.