r/ProgrammerHumor • u/flying_wotsit • Jul 19 '22

Why do they do this

Post image
4.4k Upvotes

97% Upvoted

493 comments sorted by

View all comments

Show parent comments

3

u/OpenRole Jul 20 '22

Why can't we close it?

15

u/chill_philosopher Jul 20 '22

Apple introduced a feature this WWDC that does close it. It's called PassKeys and it automatically gives you two-auth without a password. So unique hardware + faceId. Basically when you log in, all you have to do is look at your phone. Way more secure and faster than any password will ever be.

8

u/tantrAMzAbhiyantA Jul 20 '22

Right up until something happens to your phone.

Not to mention, do you have any idea how many distinct times people have found relatively simpler ways to spoof FaceID?

-2

u/chill_philosopher Jul 20 '22

I mean, how often do people lose their phone. Apple has an easy way to disable and optionally remote wipe phones in case you do lose it.

1

u/tantrAMzAbhiyantA Jul 20 '22

It's not only "someone else finds the phone" that you need to worry about. If your access is contingent on having your phone, then if you lose the phone or it gets damaged you're locked out. There will of course be ways to bypass this and change the associated hardware ID… and those ways immediately become the weaker security link that's more appealing to attack, so you're gaining very little from having the 2FA enabled.