3 ms·
> The great security concept behind TouchID isn't so much that it's using biometric login, but that it makes using a secure passcode viable yes. Which is I'm a
by pilif 12y ago
> The great security concept behind TouchID isn't so much that it's using biometric login, but that it makes using a secure passcode viable
yes. Which is I'm a very happy user of TouchID. My passphrase is 25 characters long, containing letters, numbers and even symbols.
I furthermore hope that I'll be able to recognize threats early which will allow me to shut off the phone quickly enough, forcing a passcode entry.
That's beside my point though: If law enforcement and/or criminals get to use these diagnostic services without my passcode being entered, then all of this is moot because they would just access the data and not bother with the passphrase to begin with.
The article in apples knowledge base does neither confirm nor deny that there is access to these diagnostic services that doesn't require the phone to be unlocked, so I assume that there is a backdoor and I have planned my usage accordingly.
- mnem 12y agoThe devices have to be paired though (with the trusted computer thing), and to complete that pairing process you need to unlock your phone with the passcode, if it is locked. If it's unlocked you just have to poke a dialog button, but if it's unlocked you're screwed anyway :)
- pilif 12y agoYes. That's the official method. What I'm concerned about is the backdoor that allows pairing without previously unlocking the device. Apple does neither confirm nor deny it exists, so we have to assume it exists. And when it exists, it could have been given to various law enforcement agencies or stolen by criminals which now use it for identity theft. Which is why I prefer my hardware not to be backdoored.