Buttonless fingerprint sensors are coming to phones this year

[FlyingPenguin]

I was wondering how long this would take. It would be nice to incorporate it into laptop touch screens as well.

http://www.theverge.com/circuitbreaker/ ... nless-2016

[wvjohn]

wonder if that means that anyone with a copy of your fingerprint can unlock it

[FlyingPenguin]

They can now. There was a story today that the FBI forced someone to give them their fingerprint under court order so they could use it to unlock a phone.

[wvjohn]

Making you unlock it is a 5th amendment issue which as far as I know, hasn't been settled by the supreme court. I was thinking of some entity who had you fingerprints on files, or who had stolen your prints from some unlikely source like OPM Or maybe something really elegant like a text/email with a trojan containing a scan of your print, which would open the door while you were asleep....

[FlyingPenguin]

Not stopping them from doing it anyway:

The government wants your fingerprint to unlock your phone. Should that be allowed?
http://www.latimes.com/local/california ... story.html

But yeah, all this bio metric data being stored is getting a little out of hand. If you have enough data points to duplicate someone's finger, you can bypass all this stuff. Mythbusters easily bypassed industrial grade fingerprint scanners that (and here's the important part) had two factor authentication disabled.

Really secure facilities use two factor: something you have and something you know (retina and pin number or fingerprint and pin number).

People should just treat the fingerprint reader on their phones or PCs as a convenience, not a great security device, because it really isn't. If you want REAL security, and some legal deniability, you use a password (not just a PIN) on your phone or PC and then be prepared to sit in jail as long as a judge holds you in contempt I guess:

Suspect jailed indefinitely for refusing to decrypt hard drives
http://tinyurl.com/zdumwoz

[Err]

Not stopping them from doing it anyway:

The government wants your fingerprint to unlock your phone. Should that be allowed?
http://www.latimes.com/local/california ... story.html

But yeah, all this bio metric data being stored is getting a little out of hand. If you have enough data points to duplicate someone's finger, you can bypass all this stuff. Mythbusters easily bypassed industrial grade fingerprint scanners that (and here's the important part) had two factor authentication disabled.

Really secure facilities use two factor: something you have and something you know (retina and pin number or fingerprint and pin number).

People should just treat the fingerprint reader on their phones or PCs as a convenience, not a great security device, because it really isn't. If you want REAL security, and some legal deniability, you use a password (not just a PIN) on your phone or PC and then be prepared to sit in jail as long as a judge holds you in contempt I guess:

Suspect jailed indefinitely for refusing to decrypt hard drives
http://tinyurl.com/zdumwoz

I read the story involving the iphone earlier today. This one is really gray because she was actually charged and convicted but her conviction involved a guilty plea so I doubt much evidence was presented. Should she be compelled to unlock the phone? I don't know. To me it violates her 5th amendment rights. Now the other case involving encrypted hard drives is total BS in my opinion because the guy hasn't been charged with anything other than contempt.