News for hackers. Stuff that matters.
Re:iOS 14.5 delivers Unlock iPhone with Apple Watch, new pri... by ryanlol on Monday April 26, 2021 @02:12PM (#26945901)
> Also, Face ID is less secure. If you're detained or mugged, just looking at your phone will unlock it before you can react and look away

Much easier to force someone to unlock the phone with their fingerprint than to force them to unlock with faceid if you have “Require attention” on.

You can’t physically force someone to look in a certain direction, but you definitely can force them to tap their finger on a surface.

Re:iOS 14.5 delivers Unlock iPhone with Apple Watch, new pri... by ASalazarMX on Monday April 26, 2021 @02:41PM (#26946311)
> You can’t physically force someone to look in a certain direction

Excuse me, but this is ridiculously easier than forcing someone to use their fingerprint; just wait until they are distracted, show them the phone and ask them "what is this?". It unlocks in less than a second with "Require Attention" activated. We prank each other this way when we forget our phones around the house.

Re:iOS 14.5 delivers Unlock iPhone with Apple Watch, new pri... by Grustaf on Tuesday April 27, 2021 @05:09AM (#26953681)
We're not talking about pranks, we're talking about someone getting robbed. It will be pretty hard for the robber to "distract you" and spring the phone on you.
Re:iOS 14.5 delivers Unlock iPhone with Apple Watch, new pri... by djhn on Monday April 26, 2021 @02:15PM (#26945938)
Long passcodes are still better.
Re:iOS 14.5 delivers Unlock iPhone with Apple Watch, new pri... by acdha on Monday April 26, 2021 @02:42PM (#26946314)
You can't make a general assertion like that because “better” depends on different factors:

* If you're concerned about someone who can see you typing, a biometric is better because they have far fewer chances to watch you — especially if you don't reboot outside of your home.

* If you're concerned about actual adoption, a biometric is better because you remove the constant frictional password entry cost which causes a large fraction of users to use short, easily-entered passwords.

* If you're concerned about someone who has enough access to construct a usable fingerprint / face facsimile but can't coerce you into providing a password or shoulder-surf it with a drone, a long password is better.