Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> This is a terrible way to manage identity. From afar, a Social Security number looks kind of like a password. But you can change a password, and you shouldn’t use the same one with every service.

Going on a tangent, Apple has made the same mistake with TouchID.



> Apple has made the same mistake with TouchID.

I think that's one of the motivations (if not the primary one) to add the feature to disable TouchID from the lock screen via Emergency SOS:

https://www.macrumors.com/2017/08/17/ios-11-emergency-sos-di...


TouchID is better than no passcode, that's the purpose for it.

Joe/Jill Public won't use a passcode on their phone, because it's too much hassle. But they WILL enable TouchID, thus rising the bar for random phone thieves/hackers.


People didn't start picking my phone up and trying to get into it until I set a pin. Back when I had an android there wasn't even a lock screen and no one ever touched it.


I know very little about cybersecurity and cryptography, but wouldn't it make sense for each device have a different passcode associated with a touch id? For example, my iPhone has a passcode XXXXXX, with touch ID associated with it. At the same time, my Macbook has a passcode 0123456789 with a touch ID associated with it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: