Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
There's this well-reported case of a couple where the wife wanted to buy a pressure cooker, while at the same time her husband was interested in buying a backpack, and suddenly they had police in force on their doorstep...

I wonder since this happened if the sales of those two items have dropped as a result. Hahaha, I can't even write out the name of those two items.
 
if you guys are looking for security there is this tweak codescrambler.
it basically shuffles the lockscreen code everytime. its pretty neat.
 
in my view, passwords are better. anyone can steal your fingerprints (they are all over our phone)

I highly doubt that someone could lift off your fingerprints and then use it to fool the TOUCH ID into giving them access past the fingerprint sensor. Shortly we will see a bunch of videos where people will show their attempts at fooling the TOUCH ID system.
 
The only thing the TouchID sensor will do is ensure that most new iPhones stolen in the future will be 5Cs.

After all, even if the thief did cut off all your fingers on both hands (they may have to do this to ensure they get the right one), it would look pretty gruesome on ebay when they showed the photo of the phone next to the finger you also need to get into it. This alone makes it very difficult to sell on for money.

Finally, I find it amusing that people love to see/read about other peoples/celebs lives and don't see that as an invasion of privacy at all but as soon as they think people are looking at their dull lives they go crazy! :eek:
 
I really hope this will get more people to use more complex passwords, as opposed to 4 digit passcodes to unlock their phones. Since TouchID would be used most of the time, having a more complex password to type on the rare occasion you need to, would be a nice little extra buffer.


Hmm when it is snowing, raining or just balls cold this winter. Good luck when you have gloves on. Hope you still have the pass code option.

so your prints are on the phone screen/home button.. someone can dust it and make a copy clone and makes a 3D print out of it and wala your key has been copied :eek:

Two great examples of people not reading an article, or viewing the highly available information from Apple before commenting.

Will the next generation LifeProof cases have an additional access panel to get to the fingerprint sensor? Surely they cannot cover it up with anything. It would probably suck to have to take the case off to answer the phone.

Lifeproof cases would work anyway. You don't need to unlock the iphone to answer a call, never had to in the 1st place.
 
All it takes is 1 hack or 1 bug...


I still think some (or most) of the fears are that the fingerprint sensor is the ONLY way to get into the iPhone.

So...even if you disable the fingerprint security/ID/whatever you want to call it, you STILL are putting your finger on the sensor that has the ABILITY to read it...if the iPhone is hacked, the sensor could be secretly turned on to "record" your fingerprint and upload it somewhere and/or cross-reference lots of wonderful things.

The hacks are real...the problem is real. I'm not necessarily buying into all the conspiracy theories...but the point is STILL that the only way to use the iPhone is to press the fingerprint sensor which has the capability of recording your fingerprint (or anyone else).

Fingerprint sensors/readers have been around for quite some time on laptops and nobody uses them...partly due to the hacks/trust of why the fingers are being read and partly due to fear of your finger not working one day and there's no way to get in to the laptop.

Anyway, I'm actually not a fan of the fingerprint scanner on the iPhone...I have no need for the security hype (for about a dozen reasons) and personally I simply don't want my fingerprints being read every day by a computer...that has access to the internet...and all my other personal data on the iPhone...and all my iPhone information (carrier, GPS locations, etc).

All it takes is 1 hack or 1 bug.
 
Until apple allow other apps to make use of the scanner it's kind of pointless and totally under utilised at the moment.

Sure, sure...I wonder how difficult it would be for the NSA to write up an app disguised as something completely innocuous. I'm sure they've already thought of that. :rolleyes:
 
In practice, this means that even if someone cracked an iPhone's encrypted chip, they likely wouldn't be able to reverse engineer someone’s fingerprint.

if someone has gone that far it shouldn't be much more effort...
 
With all the lies brought to light by the Snowden event, I do not really believe anything they say about this. I don't blame Apple for me not believing them, I blame this deceitful government.
 
I highly doubt that someone could lift off your fingerprints and then use it to fool the TOUCH ID into giving them access past the fingerprint sensor. Shortly we will see a bunch of videos where people will show their attempts at fooling the TOUCH ID system.

To add to what you stated,

Unless the Fingerprints left on the screen also include the subdermal tissue, I doubt this would work.

I am fairly sure at least one Apple Engineer has seen the following episode of Mythbusters ;) .

http://www.youtube.com/watch?v=3Hji3kp_i9k
 
It's not called paranoid anymore.

This reply from an Apple spokesperson makes me more nervous, actually, because of its misdirection.
The distinction between a fingerprint and name correlation versus a "fingerprint data" and name correlation seems artificial.

If I get a phone that has this (likely) i will never turn this feature on.

As someone who is a member of Global Entry, I'm sure the NSA already has access to my fingerprint data. I don't rats behind about that really, but obviously you are different.

Now, if you're THAT paranoid, think about this.. Do you really need to enable that feature for it to read your fingerprint every time you touch the home button?
 
"a decision that could ease concerns from privacy hawks."

I love how the WSJ inserts in pejorative language into what is - especially with the Obama NSA revelations - a quite valid concern.

This is an important way in that the media tries (and usually succeeds) to shape opinion, to create "correct" thought. Lovely.

Like your use of the phrase "Obama NSA relevations", you mean?

----------

if someone has gone that far it shouldn't be much more effort...

So how would you go about duplicating the sub-dermal layers of someones skin, assuming you've already duplicated the actual surface fingerprint?
 
After all, even if the thief did cut off all your fingers on both hands (they may have to do this to ensure they get the right one), it would look pretty gruesome on ebay when they showed the photo of the phone next to the finger you also need to get into it. This alone makes it very difficult to sell on for money.

:)

Seems like they only need to unlock it once. Then they can throw away the owner's finger and retrain the phone to use their own. Or do you need the PIN for that, I hope!

Think of TouchID as an addition to the functionality of the existing home button. Using the iPhone will be the same, as far as, how the home button behaved beforehand.

Exactly. By itself, TouchID is more of a convenience thing, like facial recognition.

For situations like in the government, laptops with a fingerprint reader are required to ALSO use a passcode every time. Something you carry and something you know.

Hmm. Wonder if Apple thought of that, and built in such a mode? Otherwise, the sensor actually makes the iPhone more of a liability for users in sensitive positions, since (as people have noted), an evil-doer could unlock someone's phone while they're sleeping... read all the secret info... then put it back, no one the wiser.

Can't wait to see the TV spy shows using this, with someone enticing the user into bed, having sex, then EASILY stealing all their info while they sleep it off.
 
If I'm understanding crypto properly, if Apple have used your fingerprint to generate a salted and hashed version of your finger print using a decent number of cycles of a widely recognised and secured hashing algorithm, then surely without the salt, it's pretty damn hard to reverse engineer the passcode - hashing algorithms being one way and all
 
I don't get why people get so uptight about NSA. It's there to protect you. If you aren't doing anything wrong then they have no reason to snoop on your data. Simple.

That's actually *NOT* how it works at all. That's how the public believed the system worked pre-Snowden. Now it is clear that all data is monitored and parsed. There is no suspecting of wrongdoing or lawbreaking, there is no targeting of "bad people," there is simply monitoring and tracking of everyone at all times online.

I'm opposed to such a system, regardless of a bad tyrant leader, but just imagine what a bad tyrant Hitler type leader would do with that type of information on everyone. There could be no resistance. And Hitler was elected. Again, I'm not paranoid about another Hitler--I think this is wrong regardless, but I'm just saying the consequences of that type of ruler coming to power would be disastrous.

And to your first point, some of us don't want or need that kind of "protection" thank you very much :)
 
Sure, sure...I wonder how difficult it would be for the NSA to write up an app disguised as something completely innocuous. I'm sure they've already thought of that. :rolleyes:

.... and they realized it's useless.

....and what would that app get... a hash token of your fingerprint salted by the device. you scan your fingerprint on two devices... two different hashes... USELESS... At best the NSA would know if it's still the same person using the iDevice...

The NSA is looking for low hanging covert fruit... it would a lot less noticable to just tap a fiber and crack all the SSL floating on it.
 
I've worked with fingerprint ID systems and knew all along that the image is not stored. People are so in a tizzy about the possibility of someone stealing their fingerprint, even though, for most people, it's stored in several location like the DMV and INS for those with a passport. Many business licenses require fingerprints too.

Plus, think about it, your fingerprints are gonna be all over your phone. If they have your phone, they don't need to be rooting around in the guts to get a copy. Jeez.
 
Sorry, but I don't trust Apple in this matter. (The fingerprint could still be sent to a big database of fingerprints along with user data/name at the NSA.) We know Obama, Washington and obvisouly the big corporations lie constantly to us, from everything about survaillance, false flag operations (yes, research the historic facts), disinformation (Syria, so-called secret information about Assad that isn't proper proof even though it's presented as such), to lies of omissions, and all this through a lapdog mainstream media run by Washington and big corporations. Why should I trust Apple in this? This could be just another lie.

Take a look at the broad, independent 9/11 investigation these days in the USA with hundreds, if not thousands, of scientists and specialists. They are finding one lie after another in the official story, and many very disturbing FACTS. Is this covered by the mainstream media? Of course, not..that would upset the corrupt power elite.
Sorry, at this point I have no faith in Apple's word. I'm not buying this phone based on principle. Damn it, we need principles! Not using/buying the products is the best consumer leverage. Now is the time to stand up against the 1984 society we now see unfolding in/from the USA. It might be too late a few years down the road....
 
Last edited:
.... and they realized it's useless.

....and what would that app get... a hash token of your fingerprint salted by the device. you scan your fingerprint on two devices... two different hashes... USELESS... At best the NSA would know if it's still the same person using the iDevice...

The NSA is looking for low hanging covert fruit... it would a lot less noticable to just tap a fiber and crack all the SSL floating on it.

I think many people misunderstand the danger here. I don't really care if anyone knows what my fingerprint looks like. I have no criminal history, a boring life, don't even really drink alcohol or do anything risky, don't have any problems that would cause me to fail getting even a top secret clearance, (unless I am close friends with some hard core lawbreaker a la Walter White that I don't even know about his/her actions). It's not about whether my fingerprint is known to someone, or if it is sitting on a guvmint shelf somewhere.

It's all about the ability to track someone's movements, thoughts (through email/text/posting) and daily routine. The problem with the fingerprint is simply that it is a biometric item that ties everything to one unique person. It is the digital equivalent of having a private detective follow me everywhere I go, having stealth gear that allows him to hear every detail of every conversation that I make, and seeing everything and everywhere I visit. Would anything compromising or embarassing come out of that? For me rarely to never. But it's creepy as hell.

And there is the possibility for so much misconception when someone who doesn't know you tries to categorize or interpret your actions. There was recently a story of a woman who tried to join an army secretary typist pool. She was denied because she had an FBI file categorizing her as a right wing extremist because of a paper she had written in school at her professor's direction. It turns out that she was a life long liberal and the file was completely wrong in its assessment (not that she was a threat either way!)

Honestly, the oddest thing to me about people blindly supporting a police state is that America is a fairly safe country to live in. Sure, the murder rates are far higher than any other developed nation, but there is no threat out there that the NSA stuff really protects us from. We have safe borders with our neighbors, two huge oceans, and a lack of true dictionary terrorism (the word is misused grossly in the media and public). If I was living somewhere like Israel, I might want a police state spying on everyone, but here it just seems silly. No one I know remotely has been affected by random acts of sabotage or violence. Threats to me are much more along the lines of food, health, and finance.
 
That's actually *NOT* how it works at all. That's how the public believed the system worked pre-Snowden. Now it is clear that all data is monitored and parsed. There is no suspecting of wrongdoing or lawbreaking, there is no targeting of "bad people," there is simply monitoring and tracking of everyone at all times online.

I'm opposed to such a system, regardless of a bad tyrant leader, but just imagine what a bad tyrant Hitler type leader would do with that type of information on everyone. There could be no resistance. And Hitler was elected. Again, I'm not paranoid about another Hitler--I think this is wrong regardless, but I'm just saying the consequences of that type of ruler coming to power would be disastrous.

And to your first point, some of us don't want or need that kind of "protection" thank you very much :)

Ah, Godwin's law strikes again.

http://en.wikipedia.org/wiki/Godwin's_law
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.