Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You do realize that B is just something on top of A, and not instead of A, right?

The finger unlock of my iPhone doesn't let me do everything. There are operations for which the password is required even if you have the right fingerprint.

So basically, the "security" of my phone is protected by my password.

If I know the password, but I don't have the fingerprint: I don't care, I can do anything. I can even enroll the finger I have.

If I have the finger but forget the password, I'm going to have a bad day since the touch ID feature requires me to input my password at least once a week and I cannot change the password or do any other sensitive operation.

So how does this scheme replace passwords? Sure, it's more convenient, since people don't have to type the password 500 times a day.

But will they actually use strong passwords? When I've initially set up my iPhone it asked to set up a code in addition to the fingerprint. That default was a 4 digit pin[0]. That's some high security right there.

---

[0] This was some 4-5 years ago, things may have changed. I remember seeing an article grilling Apple over this default. It was fairly easy to switch to a regular password, but we're talking about the default here, which we know is what most non-technical people will use.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: