News for hackers. Stuff that matters.

A comment on Face ID, Touch ID, No ID, PINs and Pragmatic Security. Parent comment

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by danjoc on Thursday September 14, 2017 @12:17PM (#15249468)
>All biometric security mechanisms are bad

They are though, if bad == insecure. Customs can make you unlock with fingerprint or face. If you can't lock yourself out, it's not secure.

[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by valuearb on Thursday September 14, 2017 @07:58PM (#15253487)
Biometric security mechanisms are the best security mechanisms.

Because they fall in the category of "will be used" as opposed to perfect security, which almost always falls in the category "won't be used"

[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by mikeash on Thursday September 14, 2017 @12:39PM (#15249717)
That's why you temporarily disable biometric authentication before you go through customs. On iOS, this is as easy as turning the device off, and in iOS 11 it just takes five quick presses of the sleep button.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by pertymcpert on Thursday September 14, 2017 @12:37PM (#15249677)
Customs can do that anyway if you have a password.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by Jeremy1026 on Thursday September 14, 2017 @01:38PM (#15250393)
Constitutionally, an individual can not be forced to enter a password for law enforcement (including customs agents).
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by eanzenberg on Thursday September 14, 2017 @02:05PM (#15250735)
That's the point, "constitutionally" while they lock you up for hours/days on end to obtain the warrant needed to give up your password unless you are willing to stay locked up.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by colejohnson66 on Thursday September 14, 2017 @02:45PM (#15251163)
Many border agents, it seems, have the “if you have nothing to hide” mentality. So if you’re refusing to unlock your phone, clearly you’re hiding something.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by Jeremy1026 on Thursday September 14, 2017 @03:51PM (#15251911)
Get that sweet settlement for wrongful imprisonment.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by coldtea on Thursday September 14, 2017 @05:35PM (#15252713)
Or, you know, no settlement, and not even a "sorry, oops" either.
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by tastythrowaway on Thursday September 14, 2017 @04:17PM (#15252132)
How many times has this actually happened though?
[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by coldtea on Thursday September 14, 2017 @05:35PM (#15252710)
That would be comforting if both (a) and (b) were true:

(a) the world was only US citizens.

(b) nothing unconstitutional ever happened to the first group.

[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by danjoc on Thursday September 14, 2017 @04:38PM (#15252306)
> Customs can do that anyway if you have a password.

Allow me to repeat myself,

If you can't lock yourself out, it's not secure.

For example, some banks have time locks. Nobody gets into the vault, unless it is in a certain window of time.

[ Parent | on HN ]
Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by coldtea on Thursday September 14, 2017 @05:34PM (#15252700)
>If you can't lock yourself out, it's not secure.

It's not secure if you can lock yourself out either.

A court could hold you in contempt for failing to unlock or intently locking.

And a state actor or even mugger could just hurt you or even kill you, in frustration if you don't open it for them.

[ Parent | on HN ]