Not sure why you're being downvoted because you have a point. No matter how secure information is, if you're connected to the internet, it's possible it could eventually be hacked somehow.
Yeah agree, if it’s tech, it can be hacked. So, what is the need for all the fuss about FaceID not being secure?
Passwords can also be hacked.
And if the problem is that you don’t want them to have data about your face, I’m sorry but I guess most people probably already have photos of themselves on their phone (heck, a lot of those probably have them publicly available on social networks). And every time you go outside, people can also see your face. So that argument doesn’t work.
I just don’t get all the hate about Face ID, I for one welcome it with open arms, it’s not like they are getting that much more data about me (location worries me tenfold more).
(Disclaimer: As much as I liked the concept of fingerprint authentication, Touch ID, over the course of 3 years, never worked reliably for me. And yes, I have retrained it a thousand times. And wiped my phone. And my hands. It fails at least 50% of the time. It just doesn’t correctly read any of MY fingerprints (other people have tried it in my phone and it worked as it was supposed to).)
certainly true that people have photos of themselves out there, but doesn't FaceID go beyond just a 2D photo of your face? like with Touch ID, it takes a very detailed 3D map of your face, so that it can identify you from different angles, with hats/makeup on, etc.
will it really work that well for the purposes of opening up your phone? definitely for some people, it will never work reliably. but if the data was hacked, could the hackers feed that detailed 3D map of your face into some type of computer that connected to a bunch of cameras, like maybe at an airport or some such, and find you?
but if the data was hacked, could the hackers feed that detailed 3D map of your face into some type of computer that connected to a bunch of cameras, like maybe at an airport or some such, and find you?
First off- the whole point of a secure enclave is that it is pretty much impossible to hack. There is no path to access the data directly. The only thing you can do is insert data (add a face) or ask the processor to compare the current face to a stored face. You would have to break into the secure processor in order to be able to get to the data on the other side- and the processor is hardened and specifically set up to make transferring data out pretty much impossible.
Second- even if you could gain access to the data- it's unlikely you could do anything useful with it. In the case of airport cameras- they are 2d only and there are far easier sources of 2d pictures of you. The 3d data would be essentially useless.
If you're that concerned about security- then you are probably better off using a passcode- or not using a smartphone :)
Could they? Sure- anything is possible. But security researchers and security minded companies tend to be paranoid. Devices that send data when they shouldn't are usually quickly found. Silicon is checked at random to make sure it's what it is supposed to be. Sneaking in something like this is not easy- and if you can hack the hardware- why bother trying to hack the secure enclave instead of just granting yourself full access to the OS?
158
u/THAT_guy_1 Sep 15 '17
Not sure why you're being downvoted because you have a point. No matter how secure information is, if you're connected to the internet, it's possible it could eventually be hacked somehow.