06-02-2014 14:31 - edited 06-02-2014 14:46
06-02-2014 14:31 - edited 06-02-2014 14:46
An interesting idea that I haven't seen here that was discussed on one of the podcasts I listen to.
06-02-2014 14:34 - edited 06-02-2014 14:34
06-02-2014 14:34 - edited 06-02-2014 14:34
on 06-02-2014 14:41
on 06-02-2014 14:41
This isn't scanning the same finger onto different locations, but repeatedly rescanning onto the same location you used for that finger after the initial scans have completed.
there's a transcript here https://www.grc.com/sn/sn-440.htm just search for Apple or Touch on the page.
06-02-2014 14:49 - edited 06-02-2014 14:56
06-02-2014 14:49 - edited 06-02-2014 14:56
on 06-02-2014 15:18
on 06-02-2014 15:18
when on the registerd list screen touch the sensor and you will see it confirm which finger is touching the sensor and that aparantly from the linked text is a retrain event
06-02-2014 15:20 - edited 06-02-2014 15:22
06-02-2014 15:20 - edited 06-02-2014 15:22
My concern would be firstly, is the fingerprint encrypted onto the device only. If so, is it a secure SHA-1 code or some other form of encryption which hides the original input (i.e. fingerprint).
Secondly, wouldn't a secondary pin be advisable to confirm you are the person after so many failed attempts at the pin code. I would suggest that might be better in terms of security. The multiple window of opportunity is a good idea although how foolproof is it?
Now with not having an iPhone 5s I am not aware of if any of this stuff exists in the software. The problem with over-simplification is somebody out there will find a way to exploit things.
on 06-02-2014 15:39
on 06-02-2014 15:39
@Anonymous wrote:
Interesting.
Have you tried this ?
I'm stuck at finding anything under the registered fingerprints saying anything about training !
Tbh I'm not getting the 'try again' message that regularly since I did what I described in my first reply.
I don't have a 5S so no.
AFAIK it's not documented anywhere.
on 06-02-2014 16:07
on 06-02-2014 16:07
on 06-02-2014 16:11
on 06-02-2014 16:11
on 06-02-2014 17:14
on 06-02-2014 17:14
They must have read my memo.