Face ID, Touch ID, No ID, PINs and Pragmatic Security

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by calvinbhai on Thursday September 14, 2017 @07:38AM (#15246896)

So, someone steals the NFC ring and then own the phone? Ring + heat detection of PIN tap pattern will end up giving a false sense of 2FA. (not sure how the ring auths on being worn, didnt see it on the website).

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by dredmorbius on Thursday September 14, 2017 @07:41AM (#15246912)

You can repudiate the device.

Stealing physical data itself is far harder than password appropriation.

And a PIN or password / passphrase, plus rate limiting, might still thwart scale attacks.

You're raising attack costs significantly.

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by istolemomsthumb on Thursday September 14, 2017 @07:59AM (#15247028)

Or cutting off a finger or hand?

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by dredmorbius on Thursday September 14, 2017 @07:04PM (#15253207)

Difficult to arrange by a phishing email, website, or trojan.

Possible to countermeasure as well.

[ Parent | on HN ]