News for hackers. Stuff that matters.

A comment on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8. Parent comment

Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by _asummers on Tuesday May 23, 2017 @08:38AM (#14400658)
The password model on Google's version of Android and iOS (as examples) is not biometric based. You need the password every few hours (at least on Android, not sure about iOS) and whenever you restart. The biometric is a keep alive for that "session". For my threat model, that's sufficient. For many, that is sufficient. For some, it absolutely is not and they should disable biometrics entirely. .
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by eric_h on Tuesday May 23, 2017 @04:41PM (#14405126)
iOS requires a password after a reboot, after 24-48 hours of inactivity or after several failed attempts with the fingerprint.

I'm glad it's not every few hours because my iPhone password is quite long.

[ Parent | on HN ]