you are viewing a single comment's thread
view the rest of the comments
[–] 58 points 9 months ago (16 children)

Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk

Not sure about the laptops; probably best to do a password there.

  • source
  • hideshow 16 child comments
  • [–] 50 points 9 months ago (1 child)

    Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 26 points 9 months ago

    That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.

  • source
  • parent
  • [–] 20 points 9 months ago

    Just tested it and can confirm it works. For those that don't have their phone handy or are worried about trying it:

    • Just 5 presses is enough. You could do 6, or just spam the power button to make sure you've got at least 5 in. Any presses after the 5th don't do anything different
    • when you do it, it opens up a menu with options to:
      • Power off
      • Make an emergency phone call to 911 (there is no option to select an emergency contact. It just calls 911 immediately)
      • Show emergency medical info
    • Afterwards, you need to enter in your pin/passcode to unlock your phone. I have Face ID and the ability to unlock my phone via my Apple Watch. Both methods are disabled until I unlock my phone with my code.
  • source
  • parent
  • [–] 20 points 9 months ago (6 children)

    Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 2 points 9 months ago* (last edited 9 months ago) (5 children)

    It’ll also trigger a call to 911, which is gonna be hard to disable in your pocket

    Edit: this is configurable behavior

  • source
  • parent
  • hideshow 5 child comments
  • [–] 13 points 9 months ago* (3 children)

    No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 9 months ago* (2 children)

    I just tested on my iPhone and it does. Guessing it’s a setting.

    … and after checking it is indeed a setting. Not sure if I turned that on or if it was on by default.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 9 months ago

    It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.

  • source
  • parent
  • [–] 2 points 9 months ago (1 child)

    between the hotspots of fingerprints and shoulder surfing risk

    If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and """assist""" you into touching your privates (aka biometrics).

  • source
  • parent
  • hideshow 1 child comment