Search This Blog

Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Showing posts with label Face ID security. Show all posts

Face ID and Fingerprint Unlocks May Put Your Privacy at Risk

 

Face ID and fingerprint unlock features allow for more convenient smartphone and account access but offer less privacy in the case of forced disclosure. According to PCMag , the police can compel an individual to unlock a phone using biometrics but not with a pin or password. The debate over the convenience versus safety of biometric verification became a heated topic this year after the FBI stormed the home of Washington Post reporter Hannah Natanson. 

The court records obtained by the 404 Media revealed that the bureau was unable to open Natanson’s iPhone due to it being protected by Lockdown mode. However, a federal judge later issued a warrant compelling Natanson to unlock her computer using fingerprint. Facial recognition and fingerprint scans are termed biometrics. They can be used to authorize access to computers, phones, and other technology. With passkeys, one can also digitally unlock online accounts and services. 

A passkey can be generated using biometrics or a passcode on a device with lock options. PCmag points out that there is nothing wrong with wanting convenience over security. On the contrary, those at higher risk of government and corporate surveillance and thus prone to coercion should consider using a passcode or passphrase instead of biometric verification. iPhone users can also consider using Lockdown mode. This setting is useful in preventing unauthorized access to the device by eliminating the option of attaching files through messages, installing device management configuration profiles, calls, and FaceTime. 

The option is available in Settings under Privacy and Security. Android also has a lockdown setting that can be used to disable biometric options to secure the smartphone in cases where the owner is fearful that their fingerprint or facial scan might be compromised. Android 13 and later versions offer Advanced Protection mode which requires hardware security keys or passkeys to access Google accounts. It also prevents the downloading of malicious apps and files and stops unauthorized access to Google services by third-party apps. Those wishing to turn off biometric verification can delete their prints or scans from their devices. 

According to PCmag , fingerprints and facial scans are saved on the phone or computer and not on the cloud. Android users can delete their biometric data by heading to Security and Privacy and tapping Device unlock/Biometrics and setting a passcode. iPhone users can go to Face ID/Touch ID & Passcode and reset Face ID or delete their fingerprint. 

PCMag contends that phone security is only a small component of personal security. One should also read the terms and conditions of technology companies, close online accounts that are not necessary, reduce digital footprints, and utilize different strong passwords to gain more control of personal data.

Fortifying iPhone Security: Stolen Device Protection & Essential Tips Amid Rising Theft Concerns

 

Numerous iPhones, often regarded as some of the best in the market, are pilfered daily on a global scale. Apple aims to address this issue with the upcoming release of iOS 17.3, introducing a feature called Stolen Device Protection.However, this security measure won't be automatically activated; users will need to manually enable it through the Settings app by accessing Face ID & Passcode.

Once activated, Stolen Device Protection will significantly impede thieves from altering the Apple ID password, disabling Find My, or adding a new face to Face ID. The prevalence of iPhone theft, as highlighted in a recent report by The Wall Street Journal, has prompted Apple's swift action to enhance security measures.

The tactics employed by iPhone thieves, such as Aaron Johnson in the U.S., often involve old-fashioned methods. Johnson, and others like him, observed users entering their passcodes and then proceeded to steal, wipe, and resell the stolen smartphones.

A key takeaway from Johnson's approach emphasizes never handing an unlocked phone to anyone. His strategy targeted unsuspecting individuals, primarily young men in social settings, by creating plausible scenarios to gain access to their phones. Victims, often in compromised states, willingly provided their passcodes, unknowingly enabling theft.

To safeguard against such tactics, it's crucial to avoid handing over an unlocked phone to anyone, regardless of the circumstances. Additionally, relying on facial recognition alone might not suffice; utilizing a strong, complex passcode and being vigilant of surroundings during passcode entry can add an extra layer of security.

Another precautionary measure involves individually locking sensitive apps, a feature less straightforward on iPhones compared to many Android devices. While iOS lacks native app-locking functionalities, utilizing Guided Access under Settings > Accessibility allows users to lock specific apps with a different passcode from the device's unlock code.

The visibility of certain iPhone models, particularly those with distinct features like the three-camera setup on the Pro Max versions, makes them more susceptible to theft. Until the implementation of Stolen Device Protection, users must exercise caution when using their iPhones in public settings to mitigate the risk of becoming targets.

While Apple continues to enhance security measures with each iOS update, staying vigilant and implementing precautionary measures remain vital to safeguard against potential theft.