Face ID, Touch ID, No ID, PINs and Pragmatic Security

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by joombaga on Thursday September 14, 2017 @12:35PM (#15249658)

You can achieve the same effect on some Android devices by exploiting the password lock from scanning the wrong finger repeatedly.

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by irq-1 on Thursday September 14, 2017 @12:58PM (#15249948)

If a judge issues a warrant allowing the police to compel the use of biometrics, can a person use the wrong finger? Courts can't compel someone enter their PIN. So can a court compel not only biometric "use" but the correct biometric?

My Android forces PIN entry after 5 wrong fingerprints.

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by tonyztan on Thursday September 14, 2017 @01:14PM (#15250119)

If you refuse to tell them which finger you used, and comply by only pressing whichever finger they ask you to press, they will have a 10% chance of getting in each time.

So if you chose only 1 finger and you chose it randomly, they will have a 50% chance of getting in after 5 attempts.

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by ithkuil on Thursday September 14, 2017 @01:49PM (#15250545)

And hope they're biased against the middle finger

[ Parent | on HN ]

Re:Face ID, Touch ID, No ID, PINs and Pragmatic Security by valuearb on Thursday September 14, 2017 @07:49PM (#15253446)

You've always been able to do this on iOS as well, but it risks an obstruction of justice charge.

[ Parent | on HN ]