Comment

Comment on Google will now make passkeys the default for personal accounts

I may be misunderstanding you, but how does that stop an attacker?

Getting a copy of someone’s fingerprint can be done without their knowledge since it is the easiest biometric to accidentally leave behind. Having to restart my phone doesn’t suddenly change my fingerprints.

Or, do you have to actually re-register your prints on a daily basis via a different form of authentication? That’d seem inconvenient and like it would just move the problem around

source

Sort:hotnew top

AA5B@lemmy.world ⁨1⁩ ⁨year⁩ ago
US legal system can compel you to give biometrics, but not password/pin

source
- confusedbytheBasics@lemmy.world ⁨1⁩ ⁨year⁩ ago
  They won’t be able to compel you before the biometric access timer expires.
  
  source
  - Natanael@slrpnk.net ⁨1⁩ ⁨year⁩ ago
    Tell that to cops at traffic stops
    
    Yes it’s a thing
    
    source
    confusedbytheBasics@lemmy.world ⁨1⁩ ⁨year⁩ ago
    Then you have a nice juicy lawsuit. No legal protection is going to prevent a rogue cop from getting your data. xkcd.com/538/
    
    source
    -> View More Comments
greybeard@lemmy.one ⁨1⁩ ⁨year⁩ ago
After the phone restarts, you must unlock your phone with your PIN(or swipe pattern) before you can use your finger again. The same is true with the 24 hour timer. Android also has a feature that if you hit the power button a set amount of times, it requires the PIN/Pattern too. So if my phone and my finger print have been separate for more than 24 hours, my fingerprint is useless. If I have any warning at all, my fingerprint is useless. Also, after a set number of failed attempts it requires PIN as well. Which means the law better get the finger print right in only a few tries or they lose their chance.

Yes, it is technically possible that law enforcement may steal my phone, duplicate my finger print(in a way that works on my phone’s finger print reader), and use that to unlock my phone while they have a chance, then suck everything out of my phone. But for anything government, that’s moving pretty swift for anything they might want to book me for.

I’m guessing you could reduce that to a lower number of hours if you really felt the need.

source
SnipingNinja@slrpnk.net ⁨1⁩ ⁨year⁩ ago
You have to enter your pin/pattern to re-enable biometrics

Also, I’m not sure which phone you’re using, but if it’s an Android there should be the option for password, some OEMs don’t give that option but they’re rare and the standard set by Google is to provide that and also the pins to be very long (I haven’t personally checked the limit, but you can make them longer than reasonable)

source