Black October - Cyber Security, how it affects PNWFF, and how you can protect yaself

[Evan B]

Hi Evan. You mentioned using biometrics. I’ve avoided that since face or fingerprint can be used without consent. What are your thoughts on that?

Or does it just come down to the xkcd wrench?

That's a fair point. For everyday account security, I'm a fan of biometrics because they make it practical to use a properly secured phone and password manager without typing a long password 40 times a day.

If by "used without consent" you mean Apple, Verizon, an app, etc. having your fingerprint or face stored somewhere, that's not how it works really. Your actual fingerprint or face isn't uploaded anywhere. The phone creates a mathematical representation of it and keeps that encrypted inside the Secure Enclave on the device. Apple/Samsung/Google doesn't get it, iCloud doesn't get it, and apps don't get it. An app basically just asks the phone "did this match?" and gets a yes or no back.

If you mean somebody physically using your face or finger to unlock the phone without your cooperation, that's a different concern. I have no input on that.

So for me, biometrics are still a pretty good tradeoff for normal day-to-day security.

 

[PhilR]

That's a fair point. For everyday account security, I'm a fan of biometrics because they make it practical to use a properly secured phone and password manager without typing a long password 40 times a day.

If by "used without consent" you mean Apple, Verizon, an app, etc. having your fingerprint or face stored somewhere, that's not how it works really. Your actual fingerprint or face isn't uploaded anywhere. The phone creates a mathematical representation of it and keeps that encrypted inside the Secure Enclave on the device. Apple/Samsung/Google doesn't get it, iCloud doesn't get it, and apps don't get it. An app basically just asks the phone "did this match?" and gets a yes or no back.

If you mean somebody physically using your face or finger to unlock the phone without your cooperation, that's a different concern. I have no input on that.

So for me, biometrics are still a pretty good tradeoff for normal day-to-day security.

My concern was the third - LE or border control holding it up to your face or finger. That said, I probably have other habits putting me at risk.

 

[Evan B]

My concern was the third - LE or border control holding it up to your face or finger. That said, I probably have other habits putting me at risk.

Yeah that's not something I'm concerned about anymore than someone carjacking me.