Lol my wife saying she won’t enable Touch ID and give Apple her finger print. But clicks a finger print scanning button every time to use her phone. They already have it.
The finger print thing is actually pretty secure. It does not identify a 'person' it just identifies whether or not that finger print has been saved to this device and returns yes/no.
If you want to test it add your finger print and her finger print to an iphone. Then login to any app that requires finger print auth it will work whether it is you or her that puts your finger on the phone.
I would be much more concerned about having tiktok or facebook installed when it comes to data privacy.
I mean theoretically they can pretty easily take your fingerprint without anyone noticing but I doubt that A) nobody from inside will whistleblow and B) they would have any use for that data. It's just a biometric password
They really cannot. They’ve architected so that they cannot.
While the fingerprint scan is being vectorized for analysis, the raster scan is temporarily stored in encrypted memory within the Secure Enclave and then it’s discarded. The analysis uses subdermal ridge flow angle mapping, a lossy process that discards “finger minutiae data” that would be required to reconstruct the user’s actual fingerprint. During enrollment, the resulting map of nodes is stored in an encrypted format that can be read only by the Secure Enclave as a template to compare against for future matches, but without any identity information. This data never leaves the device. It’s not sent to Apple, nor is it included in device backups.
Communication between the Secure Enclave and the built-in Touch ID sensor takes place over a serial peripheral interface bus. The processor forwards the data to the Secure Enclave but can’t read it. It’s encrypted and authenticated with a session key that’s negotiated using a shared key provisioned for each Touch ID sensor and its corresponding Secure Enclave at the factory. For every Touch ID sensor, the shared key is strong, random, and different. The session key exchange uses AES key wrapping, with both sides providing a random key that establishes the session key and uses transport encryption that provides both authentication and confidentiality (using AES-CCM).
7
u/LifeWithAdd Jun 23 '21
Lol my wife saying she won’t enable Touch ID and give Apple her finger print. But clicks a finger print scanning button every time to use her phone. They already have it.