PrometheusPB
About
- Username
- PrometheusPB
- Joined
- Visits
- 0
- Last Active
- Roles
- member
- Points
- -2
- Badges
- 0
- Posts
- 1
Reactions
-
Los Angeles court orders woman to unlock Touch ID-equipped iPhone for FBI
What I would want to suggest to Apple is to use the fingerprint ID not just for one finger, but a sequence of them e.g. index, thumb, ring, pinky, etc, like a numerical passcode. You can't keep them from taking your fingerprints, but you don't have to reveal the sequence.
I create and use the premise of "multi-factor authentication" with a great deal of security modifications for real-world systems. On my android phone, I have a "panic widget" that I made for the specific device that will wipe and brick if not authenticated via input from hardware keys (thank you Tasker). It's not to hide anything nefarious, just to enforce my right to privacy and frustrate those who would violate it.
I do believe there are reasons to "interrogate the phone" as a "witness" to illicit activity in extreme cases, but this just looks like the FBI slowly moving the cyber security bar little by little until it is simply accepted.
This will not work though, as someone like myself can have an app to encrypt, locked by another password only accessible by a third, and so on, including a self-destruct mechanism. Some of my email passwords were easy for me to remember, but nearly impossible to crack, even if you saw it on the screen yourself (hint: non-display characters, Unicode is just two letters from Unicorn, and passwords made with it are just as elusive).
*All* manner of security to a device should be customisable in every possible way to the user. I don't like presets...if I want my phone to lock after exactly 00:11:34:7533 of inactivity, I should be able to set it that way if I feel it protects my tin-foil hat from the aliens, or if I believe it increases my current gas mileage...or maybe just because I simply want to...
I wouldn't want to rely on TouchID anyway. Should you say, get a cut on your finger, your fingerprint could change enough to make it invalid. The only saving grace would be the actual passcode after failed attempts. Crack the fascia glass over the reader, and it may never work reliably again.