News for hackers. Stuff that matters.

A comment on Questions for TSA after reports of laptop and phone searches on domestic flights. Parent comment

Re:Questions for TSA after reports of laptop and phone searc... by greensoap on Monday March 12, 2018 @05:02PM (#16571592)
In other words, don't enable touch id or face unlock.
[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by komali2 on Monday March 12, 2018 @05:12PM (#16571682)
I'm trying to find the article now, but I recall reading that in the USA it's a lawful order to have you unlock your phone with a thumbprint, but not to unlock with a PIN code. God knows why.

Here: https://blogs.wsj.com/digits/2014/10/31/judge-rules-suspect-...

Unsure about federal application, actually. We as country need to get our shit together regarding device privacy. You should need a warrant to look at a phone, laptop, whatever, with or without a password. The security of the device should be meaningless.

As for me, I'm grateful that I have the resources to push back should this ever happen to me, jailtime or included. That's a luxury probably very few Americans can realistically afford (seeing as they can just throw you in jail for 48 hours).

[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by saagarjha on Monday March 12, 2018 @06:14PM (#16572176)
> I recall reading that in the USA it's a lawful order to have you unlock your phone with a thumbprint, but not to unlock with a PIN code. God knows why.

I believe the rationale was that they can't ask you to incriminate yourself (give up your passcode), but you don't have to say anything for them to force you to give your fingerprint.

[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by skrowl on Tuesday March 13, 2018 @08:40AM (#16575621)
My understanding is that it stemmed from them being able to compel you to take your fingerprints. In the old days you'd put your fingers in ink then put them on paper so they could record your fingerprint. I guess a judge ruled that putting your thumb on your phone isn't substantially different than that.

That said, you shouldn't ever rely solely on biometrics. In addition to the legal reason, an adversary could also unlock your phone if you were unconscious / etc using your thumb.

[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by cmsimike on Monday March 12, 2018 @05:07PM (#16571631)
on iOS anyway, you can enable face id/touch id but specifically disable it from being able to log into the phone with it. You can then use face/touch id for authentication in apps.
[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by r00fus on Monday March 12, 2018 @05:16PM (#16571721)
Or at any checkpoint, simply shut down your device (or click power button 5x). Then they can have it, but it requires a passcode that is protected by the 5th amendment.
[ Parent | on HN ]
Re:Questions for TSA after reports of laptop and phone searc... by saagarjha on Monday March 12, 2018 @06:13PM (#16572168)
On iPhone X, all you have to do is "squeeze" the phone, or press the side and volume buttons at the same time.
[ Parent | on HN ]