News for hackers. Stuff that matters.
Re:Face ID and Touch ID for the Web by duskwuff on Wednesday June 24, 2020 @02:47PM (#23632177)
That's a really interesting point. If this really does allow a web user to prove that a human interacted with the computer, it'd make for a really nice CAPTCHA replacement.
Re:Face ID and Touch ID for the Web by jiveturkey on Wednesday June 24, 2020 @03:10PM (#23632467)
it doesn't do that, since there's no attestation.
Re:Face ID and Touch ID for the Web by bfulgham on Wednesday June 24, 2020 @06:48PM (#23634735)
Yes there is. The video covers this clearly.
Re:Face ID and Touch ID for the Web by Tepix on Wednesday June 24, 2020 @03:15PM (#23632541)
Did you watch the video?
Re:Face ID and Touch ID for the Web by jiveturkey on Wednesday June 24, 2020 @05:09PM (#23633918)
where he says it is "not included"? (because the Apple secure enclave does not attest keys.)

also where he falsely alludes to other attestations being identifying? sure, they can be, but they generally aren't.