top 73 comments

sorted by: hot top controversial new old
[–] 105 points 9 months ago (11 children)

Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”

Use biometric security at your own risk.

  • source
  • hideshow 11 child comments
  • [–] 56 points 9 months ago (1 child)

    Just don't. No pussyfootin' around. Every single person the US has access to is a possible "suspect" for anything it claims.

    Act like it, citizens. Protect yourself, then help others to do likewise.✊🏼

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 9 months ago

    So tired of the "if you're not doing anything wrong, then you have nothing to hide" and "if you care too much about privacy, then you seem suspicious" lines.

    People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I've raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives...

  • source
  • parent
  • [–] 14 points 9 months ago (3 children)

    Even then, why not just use the wrong finger(s) enough times to disable biometrics there too?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 28 points 9 months ago (2 children)

    So basically, the reporter said she doesnt use it, but that was just a lie she got called out on?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 44 points 9 months ago (1 child)

    Or it was setup at one point by whomever assists her with IT and she forgot. Lots of possibilities when you're dealing with humans

  • source
  • parent
  • hideshow 1 child comment
  • [–] 58 points 9 months ago (16 children)

    Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk

    Not sure about the laptops; probably best to do a password there.

  • source
  • hideshow 16 child comments
  • [–] 50 points 9 months ago (1 child)

    Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 26 points 9 months ago

    That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.

  • source
  • parent
  • [–] 20 points 9 months ago

    Just tested it and can confirm it works. For those that don't have their phone handy or are worried about trying it:

    • Just 5 presses is enough. You could do 6, or just spam the power button to make sure you've got at least 5 in. Any presses after the 5th don't do anything different
    • when you do it, it opens up a menu with options to:
      • Power off
      • Make an emergency phone call to 911 (there is no option to select an emergency contact. It just calls 911 immediately)
      • Show emergency medical info
    • Afterwards, you need to enter in your pin/passcode to unlock your phone. I have Face ID and the ability to unlock my phone via my Apple Watch. Both methods are disabled until I unlock my phone with my code.
  • source
  • parent
  • [–] 20 points 9 months ago (6 children)

    Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 2 points 9 months ago* (last edited 9 months ago) (5 children)

    It’ll also trigger a call to 911, which is gonna be hard to disable in your pocket

    Edit: this is configurable behavior

  • source
  • parent
  • hideshow 5 child comments
  • [–] 13 points 9 months ago* (3 children)

    No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 9 months ago* (2 children)

    I just tested on my iPhone and it does. Guessing it’s a setting.

    … and after checking it is indeed a setting. Not sure if I turned that on or if it was on by default.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 9 months ago

    It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.

  • source
  • parent
  • [–] 2 points 9 months ago (1 child)

    between the hotspots of fingerprints and shoulder surfing risk

    If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and """assist""" you into touching your privates (aka biometrics).

  • source
  • parent
  • hideshow 1 child comment
  • [–] 13 points 9 months ago (9 children)

    Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?

  • source
  • hideshow 9 child comments
  • [–] 6 points 9 months ago (4 children)
  • [–] 22 points 9 months ago (3 children)

    To get back the seized property, owners must prove it was not involved in criminal activity.

    Well, that just sounds amazing and not at all exploitable

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 9 months ago (1 child)

    Remember iPhone users: 5 quick presses of the side button will disable biometric unlock and require a PIN.

  • source
  • hideshow 1 child comment
  • [–] 18 points 9 months ago (9 children)

    on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.

  • source
  • hideshow 9 child comments
  • [–] 9 points 9 months ago

    My phone decided to change what holding the power button does at some point, so watch out for that.

    For those wanting to ensure theirs does the same, at least for Samsung, it's under:

    Advanced Features > Side Button > Long Press

  • source
  • parent
  • [–] 6 points 9 months ago (1 child)

    Mine doesn't even have the option. Seriously made a mistake with going samsung.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 9 months ago

    It's been a while since I had a Samsung, but iirc there's an option to add it to your power menu. 

    More importantly, rebooting or powering off the phone is more secure anyways. You should just do that in 99% of circumstances. 

  • source
  • parent
  • [–] [S] 3 points 9 months ago (2 children)

    What's the difference between lockdown and just rebooting your phone (putting it into the first-run state)?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 9 months ago

    Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.

    This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.

  • source
  • parent
  • [–] 6 points 9 months ago

    Paywalled.

    If you just want to learn about Lockdown Mode, here ya go:

    https://support.apple.com/en-us/105120

  • source
  • [–] 11 points 9 months ago (14 children)

    Got I hate fucking paywalls

  • source
  • hideshow 14 child comments
  • [–] 8 points 9 months ago (13 children)

    Here’s an archive link for you.

    https://archive.ph/cvFNb

    In the future, you can go to archive.ph and put in the url and it’s usually already been archived. There are some paywalls it doesn’t get through, but it handles most of them.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 7 points 9 months ago (12 children)

    I know but it irritates me to add that step for every single article (how is OP viewing it too?)

    Blessed is the OP who simply provides the archived link as well

    When I’m in mobile I often won’t even bother and just go about my day

  • source
  • parent
  • hideshow 12 child comments
  • [–] [S] 3 points 9 months ago (11 children)

    how is OP viewing it too?

    Blessed is the OP who fully utilizes their adblocker.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 2 points 9 months ago (2 children)

    lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)

    If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷‍♀️

    If you’re gonna share articles you should actually share them

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 0 points 9 months ago (1 child)

    I'm sorry, your poor system configuration is my problem? Getting blank pages is a you problem.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 9 months ago*

    You’re the one sharing articles dude so unless you don’t want people to read them I’m not sure what your position here is

    By all means continue sharing paywalled articles that 99% of people can’t read without all hitting the archive sites themselves

    Great work 👍

  • source
  • parent
  • [–] 1 point 9 months ago (7 children)
  • [–] [S] 1 point 9 months ago (6 children)

    Firefox Android + uBlock Origin = magic.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 9 months ago (5 children)

    Don't know if you care, but with uBlock origin on Firefox mobile and this list the article is still behind the pay wall

  • source
  • parent
  • hideshow 5 child comments
  • [–] [S] 1 point 9 months ago (4 children)
  • [–] 1 point 9 months ago (3 children)

    Which one is the second? On the page you linked nothing looks like a list to remove pay walls except the list you linked

  • source
  • parent
  • hideshow 3 child comments
  • [–] [S] 2 points 9 months ago (2 children)

    I was perhaps a little too subtle but I linked 2 lists:

    https://codeberg.org/Mahogany0330/BeautifyingPageCleaner

    And

    https://github.com/liamengland1/miscfilters/blob/master/antipaywall.txt

    The first one's title and description are perhaps intentionally vague, but both work together nicely to make pages more accessible :)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 9 months ago (1 child)

    Isn’t the Washington Post state media now anyway?

  • source
  • hideshow 1 child comment
  • [–] 3 points 9 months ago

    Why is the FBI searching journalist's devices?

    Oh wait, it's 2026. Yeah, that tracks...

  • source
  • [–] 3 points 9 months ago (2 children)

    Pho es need a Burndown mode by default. Enable it, and it will continue to operate normally for 6 hours or so, during which time you can disable Burndown. But if you don't, it automatically wipes your data.

    No doubt it would be illegal and no manuf would ever actually do it, because it could be construed as destroying evidence. But an automatic Burndown would give you the plausible deniability that you just happen to have a new secondhand phone which hasn't yet been set up.

  • source
  • hideshow 2 child comments
  • 115 comments in c/technology@lemmy.world view that post
    9 comments in c/privacy@programming.dev view that post
    2 comments in c/pulse_of_truth@infosec.pub view that post
    2 comments in c/apple_enthusiast@lemmy.world view that post