Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”
Use biometric security at your own risk.
Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”
Use biometric security at your own risk.
Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk
Not sure about the laptops; probably best to do a password there.
Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.
Just tested it and can confirm it works. For those that don't have their phone handy or are worried about trying it:
Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.
It’ll also trigger a call to 911, which is gonna be hard to disable in your pocket
Edit: this is configurable behavior
No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.
I just tested on my iPhone and it does. Guessing it’s a setting.
… and after checking it is indeed a setting. Not sure if I turned that on or if it was on by default.
It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.
turning the phone off also disables the biometrics if you turn it on again, it requires whatever lockout method you used previously
between the hotspots of fingerprints and shoulder surfing risk
If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and """assist""" you into touching your privates (aka biometrics).
Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?
To get back the seized property, owners must prove it was not involved in criminal activity.
Well, that just sounds amazing and not at all exploitable
Seems a bit opposite of the whole "innocent until proven guilty" thing
I once met a guy who robbed a bank with a fake gun. (There was once an article somewhere but this was maybe 12 years ago.) He did some time in prison and he said they gave him the fake gun back afterwards.
They beat you to death with the phone and then rape your wife with it.
Remember iPhone users: 5 quick presses of the side button will disable biometric unlock and require a PIN.
on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.
My phone decided to change what holding the power button does at some point, so watch out for that.
For those wanting to ensure theirs does the same, at least for Samsung, it's under:
Advanced Features > Side Button > Long Press
Mine doesn't even have the option. Seriously made a mistake with going samsung.
This does not work on all android phones. Does nothing on the OnePlus.
What's the difference between lockdown and just rebooting your phone (putting it into the first-run state)?
Lock down will do things like disable biometrics, but the phone has still been unlocked and is no longer in a fully encrypted state like it is if powered off.
Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.
This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.
Got I hate fucking paywalls
Here’s an archive link for you.
In the future, you can go to archive.ph and put in the url and it’s usually already been archived. There are some paywalls it doesn’t get through, but it handles most of them.
I know but it irritates me to add that step for every single article (how is OP viewing it too?)
Blessed is the OP who simply provides the archived link as well
When I’m in mobile I often won’t even bother and just go about my day
lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)
If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷♀️
If you’re gonna share articles you should actually share them
I'm sorry, your poor system configuration is my problem? Getting blank pages is a you problem.
You’re the one sharing articles dude so unless you don’t want people to read them I’m not sure what your position here is
By all means continue sharing paywalled articles that 99% of people can’t read without all hitting the archive sites themselves
Great work 👍
On their phone, I hope?
Firefox Android + uBlock Origin = magic.
Don't know if you care, but with uBlock origin on Firefox mobile and this list the article is still behind the pay wall
There's 2 lists.
Which one is the second? On the page you linked nothing looks like a list to remove pay walls except the list you linked
I was perhaps a little too subtle but I linked 2 lists:
https://codeberg.org/Mahogany0330/BeautifyingPageCleaner
And
https://github.com/liamengland1/miscfilters/blob/master/antipaywall.txt
The first one's title and description are perhaps intentionally vague, but both work together nicely to make pages more accessible :)
Isn’t the Washington Post state media now anyway?
Why is the FBI searching journalist's devices?
Oh wait, it's 2026. Yeah, that tracks...
Pho es need a Burndown mode by default. Enable it, and it will continue to operate normally for 6 hours or so, during which time you can disable Burndown. But if you don't, it automatically wipes your data.
No doubt it would be illegal and no manuf would ever actually do it, because it could be construed as destroying evidence. But an automatic Burndown would give you the plausible deniability that you just happen to have a new secondhand phone which hasn't yet been set up.
top 73 comments