News for hackers. Stuff that matters.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by joering2 on Thursday September 14, 2017 @06:40AM (#15246603)
But wht was wrong with TouchID ? Were there any examples of it being weak security. What will be after Touch ID? Will Apple continue progress and built in PinchID - a tiny needle that sting you to test if you are you based on your blood/DNA?

This is a serious question. Because of there was noting wrong with Touch then why is it removed from new phone and replaced with Face ID.

Im also concerned about the data Apple will collect. I assume information about your face have to be very detailed so that this FaceID is secure. Is it really that of a push to see article in 6 months: FBI got a copy of whole Apple FaceDatabase and was able to identify and find a very dengerous criminal.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by madmoose on Thursday September 14, 2017 @06:51AM (#15246657)
TouchID was removed because it took up space on the front of the phone and Apple wanted the screen to be bigger. There's no deeper reason than that.

> Will Apple continue progress and built in PinchID - a tiny needle that sting you to test if you are you based on your blood/DNA?

I struggle to believe you when you say that's a serious question...

> Im also concerned about the data Apple will collect.

The FaceID data will be stored in the secure enclave locally on your phone, just like TouchID data was. Apple will not collect it.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by kibwen on Thursday September 14, 2017 @08:52AM (#15247415)
> TouchID was removed because it took up space on the front of the phone and Apple wanted the screen to be bigger. There's no deeper reason than that.

The Pixel handset has the fingerprint sensor on the back of the phone. It appears to work quite well. Much of this needless outrage could be obviated by allowing multiple simultaneous biometrics for auth; while taking the phone out of your pocket, place your finger on the sensor to initiate FaceID.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by colejohnson66 on Thursday September 14, 2017 @02:55PM (#15251286)
> The Pixel handset has the fingerprint sensor on the back of the phone.

How would I use my phone on a desk without lifting it up? I can do that with TouchID, but if the sensor is on the back, I can’t.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by kibwen on Thursday September 14, 2017 @04:01PM (#15251982)
I confess, never in my years of phone ownership have I had that specific use case, or considered that it might be important for others. Do you find yourself doing that often? If so, can I ask what for?
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by CocaKoala on Thursday September 14, 2017 @04:34PM (#15252275)
You can't really do that with the face id either, unless you loom over your desk in an awkward way.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by colejohnson66 on Thursday September 14, 2017 @04:55PM (#15252443)
From their promo video of iPhone X, FaceID works at angles over 45° (see the swimmer portion)
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by eckza on Thursday September 14, 2017 @09:30AM (#15247774)
> multiple simultaneous biometrics

That's very un-Apple.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by Cthulhu_ on Thursday September 14, 2017 @07:17AM (#15246780)
Second, facial features are more unique than fingerprints - according to apple's own presentation, there's a 1 in 10.000 chance that prints from different people would unlock it. With face ID, this becomes 1 in 50.000 (iirc).
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by kbutler on Thursday September 14, 2017 @07:45AM (#15246937)
Unless you have a twin.

Twins have different fingerprints.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by kevincennis on Thursday September 14, 2017 @07:35AM (#15246882)
I believe they said 1:50,000 and 1:1,000,000.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by yinghang on Thursday September 14, 2017 @07:46AM (#15246941)
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by jmreid on Thursday September 14, 2017 @09:13AM (#15247600)
He's not correcting the use of a period, he's correcting the numbers themselves. 1:50,000 and 1:1,000,000 vs 1:10,000 and 1:50,000
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by istolemomsthumb on Thursday September 14, 2017 @07:54AM (#15246997)
TouchID is trivially defeated by a 6-year-old:

https://www.usatoday.com/story/news/nation/2016/12/28/girl-u...

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by MBCook on Thursday September 14, 2017 @09:40AM (#15247876)
Did you read the article? Troy Hunt addressed that.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by colejohnson66 on Thursday September 14, 2017 @02:56PM (#15251300)
All the more reason for FaceID
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by vermontdevil on Thursday September 14, 2017 @06:51AM (#15246661)
The FaceDatabase as you imply is stored on the phone in a secure enclave. None of this stuff is sent to Apple.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by oneplusone on Thursday September 14, 2017 @09:09AM (#15247554)
Not everybody has fingerprints. I may be the minority here, but I look forward to not having to enter my pin each time.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by justusthane on Thursday September 14, 2017 @09:51AM (#15247955)
There are more people who cover their face (e.g. Muslim women wearing burkas) than people who don't have fingerprints. I wish they had both TouchID and FaceID.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by jmull on Thursday September 14, 2017 @11:39AM (#15249093)
Well, they do.

You have to decide which type of biometrics to use when you choose your model, but that's fine for a lot of cases (such as those who wear burkas or those who have no fingerprints).

Hopefully the return period gives people enough time to be sure they've made the right choice.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by jowiar on Thursday September 14, 2017 @07:17AM (#15246784)
TouchID also is problematic if you're wearing gloves, which people who don't live in San Francisco do during non-trivial portions of the year.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by kbutler on Thursday September 14, 2017 @07:48AM (#15246952)
Not sure if this applies to Apple's implementation, but my phone fingerprint recognition fails if my finger is wet (sweat, washing hands).

I haven't tried training it with a wet fingerprint.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by ceejayoz on Thursday September 14, 2017 @09:18AM (#15247655)
This definitely applies to Apple's implementation. It's infuriatingly sensitive to even damp fingers, in my experience.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by madeofpalk on Thursday September 14, 2017 @08:40AM (#15247325)
> people who don't live in San Francisco

I find this humorous because for me, an Australian, San Francisco is quite cold and I wore gloves there.

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by cptskippy on Thursday September 14, 2017 @08:57AM (#15247461)
> TouchID also is problematic if you're wearing gloves

And the touchscreen?

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by robin_reala on Thursday September 14, 2017 @09:08AM (#15247547)
There are plenty of gloves designed to work with capacitative touchscreens (small wire mesh in the fingertips) but none that let you use TouchID.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by istolemomsthumb on Thursday September 14, 2017 @07:56AM (#15247007)
As long as you can easily unbutton your shirt:

http://www.dailymail.co.uk/sciencetech/article-2430654/iPhon...

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by vlozko on Thursday September 14, 2017 @07:44AM (#15246925)
Also fails constantly when you're doing certain physical tasks. It becomes nearly useless after a few hours of doing landscaping work.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by swah on Thursday September 14, 2017 @09:10AM (#15247570)
Curious how much face one needs to show during winter for FaceID to work.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by liberte82 on Thursday September 14, 2017 @11:20AM (#15248907)
Well, you can always still use your PIN, same as you can with Face ID.
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by liberte82 on Thursday September 14, 2017 @11:18AM (#15248880)
It was so they could remove the home button.