I suppose if you value your privacy over your well-being/existence you can perhaps resist giving up your password (not so with a fingerprint). Or maybe you could set up a "suicide pill" alternate password that wipes/bricks the machine when entered if you wanted to deprive your future self of the opportunity to relent as the torture escalates...

(Edit: I guess the latter is also doable via fingerprint if a different finger is used as the suicide pill, seems a bit risky for normal use though!)

If you're in the US than the cops can't force you to give up your password but they can force you to unlock your phone with your finger.

I think that's far more important.

One option is to protect the master password with a security LARP scheme that's so complex and unwieldy that no sane attacker will believe you when you tell the truth. Like, Shamir's secret sharing, but the fourth part can only be passed via a Ballet choreography. Also, the sixth Yubikey is biometric and will only work with a latex fake of the right pinky prepared by this exact recipe. The final part of the password is the statistical expected value of this slightly unfair die, obtained after 10 000 throws, to the third digit.

Well played. You have your finger on the pulse.

It's unclear to me if Touch ID already ignores dead tissue. I can find some reputable sources claiming it does, but there seems to be a lack of consensus.

> Mashable repeatedly asked Apple, Google, and Samsung for comment on the matter, but received not a single response to our numerous inquiries. We also reached out to a host of biometric security experts, hackers, digital law experts, and forensic pathologists in an attempt to get to the bottom of what has passed from the realm of dark thought experiment to serious inquiry, but the responses (or lack thereof) only further muddied the waters.

The articles I find claiming touch ID rejects dead fingers seem to be written by people who have no idea what they're talking about, so I would not take claims about its liveness guarantees (hah) seriously. People mostly seem to be confusing credible claims about rejecting e.g. pictures of fingerprints with incredible claims about detecting if a piece of tissue is alive or not.

heh, i watched a video about putting a carrot in an oximeter and it showed a reading. i swept that as covid costcutting making shoddy equipment but i had a 2016 bought oximeter and i saw 50-60% saturation on a carrot and mind=blown.

the problem is, you cant really say "ignore less than 70% saturation as that is most probably a carrot" because covid patients got as low as 50% so i don't know what to make of it

I don't know about smartphones and Macbooks, but biometric access control systems in buildings and such usually measure at least the body temperature.