Hacker News Reader

Comment by dewey | Hacker News Reader

Why do you have to type it that often? I usually have to type mine once per day and the rest is with fingerprint or faceID

View on HN

If you are using fingerprint or faceID, then they do not even have to use this tool.

both touchID and faceID are ephemeral and expires after 24 hours (configurable, i think). Unless the device was obtained from the person immediately any hardware hack to bypass them won't work.

True.

It is still a 24h block (let's use the default) where the device is vulnerable. In many countries there are no protections against pressing your finger on the phone, or worse yet, turning it to face you.

It works fine for every day use, and if I ever find myself in a situation where I could conceive a higher than normal risk of getting arrested, I would reboot the device so the password is required to unlock it. This can be done with one hand in the pocket in a matter of seconds.

Tap the power button 5 times to activate Emergency controls. Offers to power off, display Medial ID information, or instigate an Emergency SOS where your GPS location is sent in an SMS to a designated emergency contact and a call to the emergency services is initiated.

It also disables biometric unlocking until the password is entered.

Sometimes you don't expect such situations/events. And then it's to late.

You can just hold the side button. I believe that’s added for exactly that use case.

FaceID requires you to have your attention on your device... if you look away it won't unlock.

You can hold the side button for a bit to force it to require a passcode again.

Specifically lock plus either volume button.

Reply on news.ycombinator.com