• CubitOom@infosec.pubOP
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 month ago

    In the USA, they can legally force you to unlock a device using biometrics.

    Also, biometrics can be fooled in other ways.

    • JRaccoon@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 month ago

      Yes, but that’s besides the point. If the convenient options for a normie user are

      • Having a weak password
      • Having a strong password and a fingerprint

      Out of those the fingerprint with a strong password is way better option, imo.

      In the USA, they can legally force you to unlock a device using biometrics.

      Also, how does that work? Can’t they legally force you to enter your password too? Or can you claim you don’t remember it? If that works, can’t you just have a band-aid on your finger or something? Surely they cannot force you to take it off and risk getting an infection on the large wound you just happened to get yesterday…?

      • 0x0@infosec.pub
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 month ago

        A normal user will most likely never encounter a situation where their weak password would be at risk, but are much more likely to having their biometrics forced by law enforcement or border control.

        They will rip your bandaid off and force your finger or face to scan while holding your device.

        Any weak password at all would have been better in a situation like that.

              • curbstickle@anarchist.nexus
                link
                fedilink
                English
                arrow-up
                0
                ·
                1 month ago

                Compared to guaranteed success, a weak password is superior.

                Youre comparing a weak password to no password here and suggesting no password is better.

                • deliriousdreams@fedia.io
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  1 month ago

                  I’m not. I have never seen a device that can be set up without a password or pin in addition to face or fingerprint unlock.

                  You have to have both.

                  • curbstickle@anarchist.nexus
                    link
                    fedilink
                    English
                    arrow-up
                    0
                    ·
                    edit-2
                    1 month ago

                    Once the biometrics are there, it replaces the pin/password in most scenarios I can think of.

                    Cell phone access, logging into a PC, etc.

                    Setting up both doesn’t mean that both are required for access.

                    Biometrics can be compelled (forced). So face or fingerprint can be forced, making them irrelevant to security - the same as no password.