News for hackers. Stuff that matters.
Re:Fingerprints are Usernames, not Passwords by devx on Tuesday October 01, 2013 @03:15PM (#6478434)
And I think that's the main problem with it. People think that it's actually a true replacement for a password, even though it's not.
Re:Fingerprints are Usernames, not Passwords by gfodor on Tuesday October 01, 2013 @03:39PM (#6478576)
Give me a real world scenario where this distinction matters and affects real outcomes. For real users, not people who are trying to protect themselves from the CIA.
Re:Fingerprints are Usernames, not Passwords by GuiA on Tuesday October 01, 2013 @04:49PM (#6478999)
You have your phone in your pocket, I want to access your data.

With touch unlock, all I need is my buddy to hold you for 3 seconds while I twist your arm and unlock the phone.

With passcode unlock, getting the password out of you will take some more effort.

Oh, and in this scenario, I can be a thief, or a police officer, or a borders agent, or an abusive husband, or many other things :)

Re:Fingerprints are Usernames, not Passwords by DanBC on Tuesday October 01, 2013 @04:50PM (#6479010)
> With passcode unlock, getting the password out of you will take some more effort.

Given that there are two people, capable of violence, against the phone owner I'm not sure that getting the password is going to be that much trouble.

Re:Fingerprints are Usernames, not Passwords by GuiA on Tuesday October 01, 2013 @05:23PM (#6479172)
Forcing someone to put their finger on a phone is a matter of seconds. No matter how you put it, getting a password is harder and lengthier.
Re:Fingerprints are Usernames, not Passwords by pessimizer on Tuesday October 01, 2013 @06:14PM (#6479392)
Getting a password requires consent, even if it's under duress. Getting your finger doesn't require you to agree with anything.
Re:Fingerprints are Usernames, not Passwords by marcosdumay on Tuesday October 01, 2013 @04:48PM (#6478995)
If you use that fingerprint code, any thief that steals your phone and wants your data will have it. It offers no protection at all.

Now, if you arguee that no thief will ever want your data (and you'd be probably right), it doesn't matter if you lock your phone or not, and it won't matter how you do that. In this case, locking schemes are completely useless.

(Now, I'd be content with a fingerprint reader that recognizes a finger - any finger - and unlocks the phone. It's enough protection if my pocket can't defeat it. Unlocking only by specific fingerprints looks like a pain, nobody else will be able to unlock my phone? Thanks, but I'll pass that.)