Re:Intel Security True Key
by SomeStupidPoint on Monday December 05, 2016 @01:26AM
(#13103737)
Your fingerprints are probably all over the device they stole, though.
It's like if you wrapped your laptop in a decorative cover of your password written everywhere.
Similarly, if facial recognition becomes the standard, thieves will just take a snap when they rob you.
You average pick-pocket is not going to lift fingerprints of a phone. He will drop the phone in a plastic bag and fence it to someone who can lift the prints or factory reset it without the prints.
Can you factory reset an iPhone without the passcode? I thought Activation Lock was supposed to prevent this?
You can wipe without a passcode, but if the user turned on Find My iPhone before the phone was wiped, the phone will be a brick until one logs into the associated iCloud account.
Probably worth more as parts to a more shady repair shop. Last I heard, a shiny new laptop's only worth a couple hundred when fenced.
And this is better, somehow?
Depends if it reduces theft.
Re:Intel Security True Key
by newscracker on Monday December 05, 2016 @07:16AM
(#13104905)
I think post Activation Lock and similar features on smartphone platforms, thieves usually sell stolen devices to those who rip them apart to get to specific parts that they can resell. That will continue until the phone makers figure out how to disable the display, digitizer, battery and other parts that have value even in a "bricked" phone.
> Your fingerprints are probably all over the device they stole, though
Including very likely the fingerprint scanner itself.
What's your point? If a random pick-pocketer steals a phone from me, they don't care about accessing my data. If they wanted to, it's easier with face/fingerprint recognition. Just grab my picture from facebook/twitter/find me by email or phone number, fingerprints are on my phone, batter, sim card, screen... everywhere. It's slightly more expensive than printing my picture from facebook but many times proven, doable. On the other hand... how can you guess my pattern lock or SHITYPassword1111?
If I'm a victim of a targetted attack, better not to have a phone at all.
For the average person who's more concerned about opportunistic theft of a device than a targeted attack I'd argue that biometrics are more secure because you can't have the equivalent of a shitty password. There is no fingerprint equivalent of "1111" as your device PIN. A random pickpocket in the subway doesn't know who you are and thus can't implement any spoofs.
For anyone trying to defend against an attacker specifically targeting them, you're completely right.