Pulse of Truth

1722 readers

75 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth@infosec.pub

Apple launches Digital ID, a way to carry your passport on your phone for use at TSA checkpoints (techcrunch.com)

submitted 1 week ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

6 comments fedilink hide all child comments

Apple's new Digital ID will let U.S. users carry their passport on their iPhone, and use it at TSA checkpoints.

you are viewing a single comment's thread
view the rest of the comments

[–] lath@piefed.social 8 points 1 week ago (3 children)

That's a trap to have your phone unlocked and confiscated.

[–] crozilla@lemmy.world 4 points 1 week ago

FTA: “In both cases, users would be able to confirm that their age is over 21 without having to also share personal information like their name, address or birthday. Apple said it can’t see when or where a user presents their ID or what data was shared. Plus, users don’t have to unlock their phone or hand it over to present their ID, as it works just like Apple Pay.”

[–] irq0@infosec.pub 3 points 1 week ago* (last edited 1 week ago) (1 children)

I don't think this is true. If I open my wallet from the lock screen then cover the front camera and close the wallet app my phone remains locked. Obviously it's a different story if you open the wallet app when the phone is unlocked

That being said, I do have some non-default FaceID settings

[–] Pika@sh.itjust.works 6 points 1 week ago* (last edited 1 week ago) (1 children)

In a perfect world, it would automatically put the device into lockdown mode when you opened up an ID using a wallet. Making it so if you left wallet, you have to put in a pin, because biological security, such as fingerprint and face ID, aren't protected and also are one of the easiest to force you into providing unwillingly.

note: Lockdown in this instance is what Android's lockdown mode is, where it prevents you from using any type of biometric login until you put in your PIN again. Not Apple's dedicated lockdown mode that will heavily lock down the device on what it can do.

The equivalent on iOS I believe is holding down the power button, and then when the shutdown slider appears, pressing cancel,

[–] irq0@infosec.pub 3 points 1 week ago

I completely agree. I guess you can turn off biometrics if you're in an environment where being forced to unlock your phone is a threat ( airports would be one of those envs for "normal" people ) but most people aren't going to do that

[–] CompactFlax@discuss.tchncs.de 1 points 1 week ago

It’s pretty irrelevant.

It is established that LEO can force biometric authentication in the USA; hence lockdown mode. But it’s likely they don’t need that provision, because most people don’t use lockdown mode.

Further, if you refuse to allow a search of your phone at a border crossing in the USA, you’ll have a bad time. They likely won’t ask, but it’s a possibility.

https://www.aclu.org/news/privacy-technology/can-border-agents-search-your-electronic