Lookout Samsung
http://www.androidcentral.com/samsung-expected-include-looko...
iOS defaults to asking for TouchID and passcode if more than 48 hours have elapsed since you last interacted with the phone, or if the phone has been power cycled.
There's a certain point at which asking for TouchID and passcode too often will encourage people to use less secure pass codes, which defeats the point of having 2-factor authentication in the first place.
Re:iPhone 6 TouchID hack
by higherpurpose on Tuesday September 23, 2014 @05:52PM
(#8358556)
> then it seems safe to be collected
At least until the myriad of iPhone data extraction tools being sold to the police finds a way to extract that, too. This one is apparently already compatible with iOS8:
http://www.accessdata.com/solutions/digital-forensics/mobile...
And from what I've noticed Apple is pretty quite about fixing vulnerabilities that these kind of tools used (i.e. the kind of vulnerabilities that need your phone to work - which is exactly the kind of power say someone like the police has).
Where do you see iOS 8 compatibility? It's not mentioned on the features page.
The current FAQ only mentions iOS7. Perhaps it's stale?
there was some race to hack the touchid (http://istouchidhackedyet.com) and the winner made this video walk through: http://vimeo.com/75324765
"Next you have to “lift” the print. This is the realm of CSI. You need to develop the print using one of several techniques involving the fumes from cyanoacrylate (“super glue”) and a suitable fingerprint powder before carefully (and patiently) lifting the print using fingerprint tape. It is not easy. Even with a well-defined print, it is easy to smudge the result, and you only get one shot at this: lifting the print destroys the original."
The most interesting thing about the new article is learning that the iPhone6 TouchID sensor is more accurate and scans a bigger part of your finger. That's good to hear.
I can only agree with the author that TouchID is mostly "good enough" security, but it'd be really great to have "enterprise-class" security by simply allowing 2-factor auth including TouchID + passcode.
I may be a bit naive but I don't see Apple being able to reconstruct your physical fingerprint from their store info in the security enclave - I see it more of a one-way function and if it never leaves the device, then it seems safe to be collected.
[1] https://blog.lookout.com/blog/2013/09/23/why-i-hacked-apples...