135
Microsoft’s Windows Hello fingerprint authentication has been bypassed - The Verge
(www.theverge.com)
this post was submitted on 23 Nov 2023
135 points (97.2% liked)
Technology
34788 readers
425 users here now
This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.
Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.
Rules:
1: All Lemmy rules apply
2: Do not post low effort posts
3: NEVER post naziped*gore stuff
4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.
5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)
6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist
7: crypto related posts, unless essential, are disallowed
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Pretty much everybody pushing fingerprints as a sensible thing for accessing a device is fucking up. It is way too easy to obtain a persons fingerprints suitable for device unlocking without them knowing - and that's ignoring that using fingerprints enables device unlocking with a persons finger against their will.
That’s why devices need something like Apple does that disables biometrics with specific button clicks
All android devices have a lockdown function that disables all but password unlock and hides all info from the lockscreen (notifications).
Anoyingly it's disabled by default though, you have to explicitly enable it in lockscreen settings, then activate it from the power off menu.
Lockdown doesn't require password unless your device settings require password -- it normally just kicks it back to requiring pin. Which is still quite secure. I don't know what you mean saying it is disabled by default -- it is available by default if you long press the power button and click Lockdown.
Even better is to reboot the device. Then it will be in lockdown mode -- pin required -- and also encrypted awaiting the pin. A modern device fresh from a restart should be quite hard indeed to crack without some alternate access to the person's Google account.
In my experience, the 'show lockdown option' is off by default. You have to enable it in settings before you can use it.
Requiring a pin on startup used to be the same, but it's not even an option anymore, it's just on.
I was also refering to pin/pattern lock as your password for android, perhaps not the best wording.
Interesting. Apple you just hold volume up and lock and it disables biometrics. It’s like that by default