Pulse of Truth

1722 readers

165 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth@infosec.pub

Apple launches Digital ID, a way to carry your passport on your phone for use at TSA checkpoints (techcrunch.com)

submitted 1 week ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

6 comments fedilink hide all child comments

Apple's new Digital ID will let U.S. users carry their passport on their iPhone, and use it at TSA checkpoints.

you are viewing a single comment's thread
view the rest of the comments

[–] irq0@infosec.pub 3 points 1 week ago* (last edited 1 week ago) (1 children)

I don't think this is true. If I open my wallet from the lock screen then cover the front camera and close the wallet app my phone remains locked. Obviously it's a different story if you open the wallet app when the phone is unlocked

That being said, I do have some non-default FaceID settings

[–] Pika@sh.itjust.works 6 points 1 week ago* (last edited 1 week ago) (1 children)

In a perfect world, it would automatically put the device into lockdown mode when you opened up an ID using a wallet. Making it so if you left wallet, you have to put in a pin, because biological security, such as fingerprint and face ID, aren't protected and also are one of the easiest to force you into providing unwillingly.

note: Lockdown in this instance is what Android's lockdown mode is, where it prevents you from using any type of biometric login until you put in your PIN again. Not Apple's dedicated lockdown mode that will heavily lock down the device on what it can do.

The equivalent on iOS I believe is holding down the power button, and then when the shutdown slider appears, pressing cancel,

[–] irq0@infosec.pub 3 points 1 week ago

I completely agree. I guess you can turn off biometrics if you're in an environment where being forced to unlock your phone is a threat ( airports would be one of those envs for "normal" people ) but most people aren't going to do that