News for hackers. Stuff that matters.

A comment on Fingerprints are Usernames, not Passwords. Parent comment

Re:Fingerprints are Usernames, not Passwords by StavrosK on Tuesday October 01, 2013 @04:55PM (#6479041)
Can't someone write an app that stays in the background on their phone and copies fingerprints of people who touch your button?
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by m_mueller on Tuesday October 01, 2013 @05:11PM (#6479116)
Under the assumption that the sandbox works, no.
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by StavrosK on Tuesday October 01, 2013 @06:25PM (#6479456)
I meant jailbroken, of course.
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by glhaynes on Tuesday October 01, 2013 @06:28PM (#6479475)
The "sandbox" being referred to is the "Secure Enclave", which apparently is what ARM calls "TrustZone": http://infocenter.arm.com/help/topic/com.arm.doc.prd29-genc-... The data isn't accessible to even the OS. So, in theory at least, jailbreaking doesn't make it any more accessible.
[ Parent | on HN ]
Re:Fingerprints are Usernames, not Passwords by StavrosK on Tuesday October 01, 2013 @06:31PM (#6479494)
Ah, that's interesting, thanks, I didn't know about it.
[ Parent | on HN ]