Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
63,285
30,347



NewImage9.png
Senator Al Franken (D-MN) has sent a letter to Apple CEO Tim Cook expressing concern over the new Touch ID fingerprint sensor built into the iPhone 5s, which went on sale earlier today.

In the letter (PDF), the Senator, Chairman of the Senate Judiciary Subcommittee on Privacy, Technology and the Law, says he is an iPhone owner and is concerned about the use of fingerprints to unlock the device.
It's clear to me that Apple has worked hard to secure this technology and implement it responsibly. The iPhone 5S reportedly stores fingerprint data locally "on the chip" and in an encrypted format. It also blocks third-party apps from accessing Touch ID. Yet important questions remain about how this technology works, Apple's future plans for this technology, and the legal protections that Apple will afford it. I should add that regardless of how carefully Apple implements fingerprint technology, this decision will surely pave the way for its peers and smaller competitors to adopt biometric technology, with varying protections for privacy.
Franken goes on to ask twelve separate questions of Cook, including:

- If it's possible to convert locally-stored fingerprint data into a format that can be used by third parties.

- If it's possible to extract and obtain fingerprint data from an iPhone 5s either remotely or with physical access to the device.

- What diagnostic information the iPhone 5s sends to Apple about the Touch ID system.

- Whether Apple considers fingerprint data to be the "subscriber information" or "electronic communication transactional records", the "contents" of communications, customer or subscriber records, or a "subscriber number or identity" as defined in the Stored Communications Act, or a "tangible thing" as defined in the USA PATRIOT Act.

The last group of questions relates to when and if Apple could be required to disclose fingerprint information to U.S. Government law enforcement agencies.

Apple, for its part, has posted an extensive knowledge base article about the security benefits of the Touch ID system, though it only discloses broad details about how the iPhone 5s stores fingerprint data, but nevertheless, it may answer some of the questions that Senator Franken asked:
Touch ID does not store any images of your fingerprint. It stores only a mathematical representation of your fingerprint. It isn't possible for your actual fingerprint image to be reverse-engineered from this mathematical representation. iPhone 5s also includes a new advanced security architecture called the Secure Enclave within the A7 chip, which was developed to protect passcode and fingerprint data. Fingerprint data is encrypted and protected with a key available only to the Secure Enclave. Fingerprint data is used only by the Secure Enclave to verify that your fingerprint matches the enrolled fingerprint data. The Secure Enclave is walled off from the rest of A7 and as well as the rest of iOS. Therefore, your fingerprint data is never accessed by iOS or other apps, never stored on Apple servers, and never backed up to iCloud or anywhere else. Only Touch ID uses it and it can't be used to match against other fingerprint databases.
Senator Franken gave Tim Cook and Apple thirty days to answer the questions and, though it is not a subpoena and Apple is not required to respond, the company is likely to cooperate.

This is not the first time that Senator Franken has interacted with Apple -- in 2011, he asked both Apple and Google to require clear privacy policies for apps sold on their app stores. He also introduced a bill to help protect customer location data.

Article Link: Senator Sends Letter to Tim Cook Over Touch ID Privacy Concerns
 

Razeus

macrumors 603
Jul 11, 2008
5,348
2,030
But it's ok, it's Apple. If this was Google collecting this information, you guys would be up in arms.
 

MacIke

macrumors regular
Sep 6, 2003
186
0
The Frigid Wasteland of MN
Nsa

I am far more concerned about the NSA and the issue of spying then I am of some company. A company has to actually respond to the customer. Whereas the government does not give a rats ass.
 

JimDeGuz

macrumors newbie
Jan 6, 2011
15
0
My 24 Hour Fitness converted to fingerprint scanning after a 10-digit keypad input which they tell you should be your phone number...sounds like a conspiracy. Tracking your workout is great. Punishment for missing leg day isn't.
 

k1121j

macrumors 68000
Mar 28, 2009
1,717
2,754
New Hampshire
Give me a break

Does this guy want to look good or something. If i am not mistaken this is not the first consumer product with fingerprint technology ( example all those laptops out there come to mind) and as far as i can tell Apple has gone further to secure your identity where there device. SOOO get off there back and be logical you silly senator
 
Last edited:

DesterWallaboo

macrumors 6502a
Sep 7, 2003
520
726
Western USA
There are legitimate concerns raised in this letter to Apple I hadn't considered. The possibility that your fingerprint information might simply be available to federal law enforcement under the Patriot Act is rather chilling. I'd like to know the answer to that question before I buy my next iPhone.
 

unplugme71

macrumors 68030
May 20, 2011
2,827
754
Earth
What he really meant: "What are you collecting and how can we get our hands on it?"

The government would love this data. Imagine every citizen having their fingerprint added to the database?

Granted not everyone owns an Apple device, but when other devices start implementing this, it'll be in the homes all across America and beyond.

I'd like Touch ID to open my car door and house.
 

cgk.emu

macrumors 6502
May 16, 2012
449
1
"Concerns" or..."hey we could use this..."

Yeah, go ahead and call me a tin-foil hat type. It shows that you really can't think for yourself.
 

CFreymarc

Suspended
Sep 4, 2009
3,969
1,149
What he really meant: "What are you collecting and how can we get our hands on it?"

If it is "Me, Al Fraken." You can be sure it is self serving. IMO, this whole Touch ID introduction will make or break the whole mass-market bio-metric business.
 

repoman27

macrumors 6502
May 13, 2011
485
167
I'm pretty sure that if you have physical access to a touchscreen device, there are ways to get the owner's fingerprint data—even if the device lacks a fingerprint scanner.
 

jyen

macrumors regular
Oct 29, 2012
105
126
Meanwhile, hardly anyone has said a thing about Google's face unlock feature which has been out on Android for some time now.
 

HiVolt

macrumors 68000
Sep 29, 2008
1,634
6,009
Toronto, Canada
PC laptops have had fingerprint sensors for years... Why isn't he writing Lenovo, Dell, HP?

This guy is just "concerned" to get his name in the news with a big name company like Apple and the new phone release, makes it look like he cares for his people...
 

ck2875

macrumors 65816
Mar 25, 2009
1,029
2,923
Brighton
I should add that regardless of how carefully Apple implements fingerprint technology, this decision will surely pave the way for its peers and smaller competitors to adopt biometric technology, with varying protections for privacy.

So Apple has to worry about their competitor's cheap/poorly executed attempts at copying their technology?
 

robertjamesm

macrumors newbie
Apr 4, 2012
16
8
Touch ID

Apple should include on their next macbook pro with retina the touch ID sensor on the power key or touchpad.

:apple:
I should be the next S Jobs
 

Smith288

macrumors 65816
Feb 26, 2008
1,220
961
Perhaps Al should have read any number of Apple blogs detailing the workings of the fingerprint technology?

I can't believe this guy got into congress...
 

HarryPot

macrumors 65816
Sep 5, 2009
1,059
509
There are legitimate concerns raised in this letter to Apple I hadn't considered. The possibility that your fingerprint information might simply be available to federal law enforcement under the Patriot Act is rather chilling. I'd like to know the answer to that question before I buy my next iPhone.

From what Apple says, even if the Government asked for it, it would be impossible for Apple to get that information. It is stored in a part of the chip that has no communication to Apple servers, or any other servers for the matter.

This is what I understood at least.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.