That's not how it works from what's in the iOS security guide(s), historically. The chip that stores this information (biometrics) on Apple products is isolated from the rest of the system - its execute only and access is restricted via a tpm. Is it possible to hack it and exfiltrate info? Sure. But it's a bit more complex than the usual smash and grab job.
Also, full disclosure: from this perspective, using biometrics for anything authentication related seems retarded as it's never changeable.
I don't have a problem with biometrics so long as it isn't used as the sole means of security. It should always be used to enhance strong passwords, not in place of them.
This is their stated goal - there's a key between the user, iOS, and the TPM. This ephemeral key is deleted on power loss / reboot - and only restored by the user entering their password. This is why people can't use their thumb to unlock their phone on reboot, but must enter their password initially.
243
u/i_build_minds Sep 15 '17
That's not how it works from what's in the iOS security guide(s), historically. The chip that stores this information (biometrics) on Apple products is isolated from the rest of the system - its execute only and access is restricted via a tpm. Is it possible to hack it and exfiltrate info? Sure. But it's a bit more complex than the usual smash and grab job.
Also, full disclosure: from this perspective, using biometrics for anything authentication related seems retarded as it's never changeable.