News for hackers. Stuff that matters.
Re:Apple Is Said to Be Working on an iPhone Even It Can’t Hack by guscost on Wednesday February 24, 2016 @07:28PM (#11171456)
> Touch ID isn't re-enabled until the phone's passcode is used.

Do the docs confirm that there is no way around this? I'd guess generating the encryption key requires the passcode, which is discarded immediately, and Touch ID can only "unlock" a temporarily re-encrypted version which never leaves ephemeral storage?

Re:Apple Is Said to Be Working on an iPhone Even It Can’t Hack by zaroth on Wednesday February 24, 2016 @08:35PM (#11171768)
From the iOS Security Guide - How Touch ID unlocks an iOS device;

  If Touch ID is turned off, when a device locks, the keys for Data Protection class
  Complete, which are held in the Secure Enclave, are discarded. The files and keychain
  items in that class are inaccessible until the user unlocks the device by entering his
  or her passcode.

  With Touch ID turned on, the keys are not discarded when the device locks; instead,
  they’re wrapped with a key that is given to the Touch ID subsystem inside the Secure
  Enclave. When a user attempts to unlock the device, if Touch ID recognizes the user’s
  fingerprint, it provides the key for unwrapping the Data Protection keys, and the
  device is unlocked. This process provides additional protection by requiring the
  Data Protection and Touch ID subsystems to cooperate in order to unlock the device.
  The keys needed for Touch ID to unlock the device are lost if the device reboots
  and are discarded by the Secure Enclave after 48 hours or five failed Touch ID
  recognition attempts.
Re:Apple Is Said to Be Working on an iPhone Even It Can’t Hack by FussyZeus on Wednesday February 24, 2016 @07:33PM (#11171480)
TouchID I believe unlocks the passcode so the phone can use it to login, but TouchID itself is not enabled until you enter it once, presumably because it isn't actually stored on the device in a readable way.
Re:Apple Is Said to Be Working on an iPhone Even It Can’t Hack by guscost on Wednesday February 24, 2016 @07:35PM (#11171494)
OK, I guess the effect is the same (as long as the passcode isn't recoverable until after startup). Thanks.