shapetables

sirlance99 said:

shapetables said:

I have deleted this otherwise great app and will be taking additional action for the fraudulent misrepresentation.

Additional action like what exactly? What do you expect to do or get? 

It’s all kinds of wrong, I agree. It’s shameful and wrong but I just don’t see what you’ll be able to do. 

 Action not involving whining anonymously on the Internet.

I have deleted this otherwise great app and will be taking additional action for the fraudulent misrepresentation.

There is no cost-effective way to read the fingerprint (biometric) data out of, say, a stolen device, but it sounds like they are getting closer to being able to write new code into the firmware that could eavesdrop on the "conversations" between the TouchID sensor and the Secure Enclave (ASIC) and can then save a copy of any fingerprint impulse from the Touch ID that is observed to cause a valid response from the ASIC. Possibly they could also add their own fingerprint impulse (or remove an existing fingerprint impulse) someday. From there, they could theoretically replay those known good impulses whenever an external signal tells them to unlock the device. But how to get that new code written into the firmware of a customer's device and how to compensate for the random number generator salt (that's probably there specifically to prevent such "replay" attacks).

FYI - WiFi and LTE have large broadcast ranges and thus demand a lot of power, so battery-powered products that support it have to be recharged often; BluetoothLE, not so much. Outside of dense urban environments, it is at least "inconvenient" to hack a low-powered BluetoothLE device while staying "out of view", whereas WiFi and LTE can be hacked from very very far away. (To control BluetoothLE devices via the Internet, one would want to use a security gateway equipped with LTE, WiFi or RJ45-Ethernet.)

Given how bad Roomba navigates, I think it would be an obvious data source for Apple Maps.