Re:Breaking Into Android Phones with a 3D-Printed Head
by kgwxd on Sunday December 16, 2018 @02:14PM
(#18694605)
It's hard to resist stating "1+1=2" when everyone knows it's true but keep behaving like its not.
Re:Breaking Into Android Phones with a 3D-Printed Head
by mikeash on Sunday December 16, 2018 @02:31PM
(#18694701)
I don’t think people keep behaving like it’s not true. They just have different priorities.
Yes, “something you have + something you know” is more secure, but security is not a binary thing, and people’s real world behaviors need to be accounted for.
Before biometric authentication was available in cell phones, I had no passcode at all. My device’s security was just the physical security of the device itself. Constantly entering a passcode was just too much hassle, let alone a proper high-strength passcode. Moving to biometric authentication massively improved my security. Lots of people I know were in the same boat, or maybe had a four-digit passcode equal to their birthday and/or ATM PIN.
It’s not foolproof but it’s good enough for almost everyone.
Sounds ok to me, at least in the weird arithmetic of this tired talking point that invariable makes an appearance every time the subject is discussed, usually in a tone of letting us in on some great, newly discovered revelation.