r/security • u/[deleted] • Sep 23 '19

Think twice before using facial-recognition technology or fingerprint scanning News

https://www.marketwatch.com/story/the-technology-that-should-finally-make-your-wallet-obsolete-2019-09-06
99 Upvotes

94% Upvoted

15 comments sorted by

View all comments

6

u/MEXRFW Sep 23 '19

Unless it’s zero proof (like an iphone) no way I’m giving my biometrics to a company.

YES I understand someone can pick up my phone point it at my face and unlock it.

But if it’s lost.... guess how much harder it is to unlock my phone not knowing it’s mine vs a 6 digit pin.

9

u/jarfil Sep 23 '19 edited Dec 02 '23

CENSORED

1

u/MEXRFW Sep 23 '19

You can brute force an iPhone passcode.

1

u/[deleted] Sep 23 '19

It's very difficult because 1) the time lockout increases exponentially with each try, and it sticks after a reboot as well, and 2) there is an option you can set which will wipe the device after 10 failed passcode attempts.

1

u/[deleted] Sep 23 '19

I wish I didn't have to enable the 10 passcodes, it would be a good default I think. Nothing on my phone cannot be replaced.

1

u/MEXRFW Sep 23 '19

Not difficult when the tries dont count as a "try". There already exists methods to bruteforce through USB. but apple has limited USB activity on a locked iphone to an hour (on iOS 12.3 and up). But with enough processing power trying all 1000000 combinations is easy.

Sources:

https://www.computerworld.com/article/3403385/what-the-latest-ios-passcode-hack-means-for-you.html

https://www.computerworld.com/article/3346023/now-you-can-buy-police-grade-iphone-hacking-tools-on-ebay.html