• Encephalotrocity@feddit.online
    link
    fedilink
    English
    arrow-up
    96
    ·
    2 days ago

    Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”

    Use biometric security at your own risk.

    • otter@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      53
      arrow-down
      1
      ·
      2 days ago

      Just don’t. No pussyfootin’ around. Every single person the US has access to is a possible “suspect” for anything it claims.

      Act like it, citizens. Protect yourself, then help others to do likewise.✊🏼

      • wonderingwanderer@sopuli.xyz
        link
        fedilink
        arrow-up
        4
        ·
        1 day ago

        So tired of the “if you’re not doing anything wrong, then you have nothing to hide” and “if you care too much about privacy, then you seem suspicious” lines.

        People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I’ve raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives…

      • Ptsf@lemmy.world
        link
        fedilink
        arrow-up
        44
        arrow-down
        1
        ·
        2 days ago

        Or it was setup at one point by whomever assists her with IT and she forgot. Lots of possibilities when you’re dealing with humans

        • BartyDeCanter@lemmy.sdf.org
          link
          fedilink
          arrow-up
          6
          ·
          2 days ago

          That makes the most sense. It was probably set up the day she got it as part of the onboarding process and then she never used it and forgot about doing something that took 30 seconds several years ago.

    • Lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      13
      ·
      2 days ago

      The only thing of mine that uses biometrics is my phone, and that is very easy to put into lockdown mode.

    • Lucidlethargy@sh.itjust.works
      link
      fedilink
      arrow-up
      5
      ·
      2 days ago

      I’ve never used this. Not in the entire time I’ve owned phones and computers.

      For those protesting ICE right now, do NOT use face recognition or finger prints. Turn that shit off and never turn them back on.

  • CompactFlax@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    59
    arrow-down
    1
    ·
    2 days ago

    Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk

    Not sure about the laptops; probably best to do a password there.

    • fonix232@fedia.io
      link
      fedilink
      arrow-up
      52
      arrow-down
      1
      ·
      2 days ago

      Biometrics are an issue because in most jurisdictions (not just the US but globally), you can’t be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.

      • CompactFlax@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        28
        arrow-down
        1
        ·
        2 days ago

        That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.

    • CocaineShrimp@sh.itjust.works
      link
      fedilink
      arrow-up
      20
      ·
      2 days ago

      Just tested it and can confirm it works. For those that don’t have their phone handy or are worried about trying it:

      • Just 5 presses is enough. You could do 6, or just spam the power button to make sure you’ve got at least 5 in. Any presses after the 5th don’t do anything different
      • when you do it, it opens up a menu with options to:
        • Power off
        • Make an emergency phone call to 911 (there is no option to select an emergency contact. It just calls 911 immediately)
        • Show emergency medical info
      • Afterwards, you need to enter in your pin/passcode to unlock your phone. I have Face ID and the ability to unlock my phone via my Apple Watch. Both methods are disabled until I unlock my phone with my code.
    • ButteryMonkey@piefed.social
      link
      fedilink
      English
      arrow-up
      20
      ·
      2 days ago

      Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.

    • UnspecificGravity@piefed.social
      link
      fedilink
      English
      arrow-up
      12
      ·
      2 days ago

      It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.

    • Tollana1234567@lemmy.today
      link
      fedilink
      arrow-up
      2
      ·
      1 day ago

      turning the phone off also disables the biometrics if you turn it on again, it requires whatever lockout method you used previously

    • lambalicious@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      2 days ago

      between the hotspots of fingerprints and shoulder surfing risk

      If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and “”“assist”“” you into touching your privates (aka biometrics).

  • jaybone@lemmy.zip
    link
    fedilink
    English
    arrow-up
    11
    ·
    2 days ago

    Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?

  • BK-201@fedia.io
    link
    fedilink
    arrow-up
    18
    arrow-down
    2
    ·
    2 days ago

    on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.

    • Zorque@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      2 days ago

      My phone decided to change what holding the power button does at some point, so watch out for that.

      For those wanting to ensure theirs does the same, at least for Samsung, it’s under:

      Advanced Features > Side Button > Long Press

      • scoobford@lemmy.zip
        link
        fedilink
        arrow-up
        6
        ·
        2 days ago

        It’s been a while since I had a Samsung, but iirc there’s an option to add it to your power menu.

        More importantly, rebooting or powering off the phone is more secure anyways. You should just do that in 99% of circumstances.

    • Ludicrous0251@piefed.zipOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 days ago

      What’s the difference between lockdown and just rebooting your phone (putting it into the first-run state)?

      • PM_Your_Nudes_Please@lemmy.world
        link
        fedilink
        arrow-up
        4
        ·
        2 days ago

        Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.

        This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.

      • NotMyOldRedditName@lemmy.world
        link
        fedilink
        arrow-up
        3
        ·
        2 days ago

        Lock down will do things like disable biometrics, but the phone has still been unlocked and is no longer in a fully encrypted state like it is if powered off.

  • Deacon@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    2 days ago

    Remember iPhone users: 5 quick presses of the side button will disable biometric unlock and require a PIN.

  • Agent641@lemmy.world
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    1 day ago

    Pho es need a Burndown mode by default. Enable it, and it will continue to operate normally for 6 hours or so, during which time you can disable Burndown. But if you don’t, it automatically wipes your data.

    No doubt it would be illegal and no manuf would ever actually do it, because it could be construed as destroying evidence. But an automatic Burndown would give you the plausible deniability that you just happen to have a new secondhand phone which hasn’t yet been set up.

      • gustofwind@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 days ago

        I know but it irritates me to add that step for every single article (how is OP viewing it too?)

        Blessed is the OP who simply provides the archived link as well

        When I’m in mobile I often won’t even bother and just go about my day

          • gustofwind@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 days ago

            lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)

            If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷‍♀️

            If you’re gonna share articles you should actually share them

            • Ludicrous0251@piefed.zipOP
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              2 days ago

              I’m sorry, your poor system configuration is my problem? Getting blank pages is a you problem.

              • gustofwind@lemmy.world
                link
                fedilink
                English
                arrow-up
                3
                ·
                2 days ago

                You’re the one sharing articles dude so unless you don’t want people to read them I’m not sure what your position here is

                By all means continue sharing paywalled articles that 99% of people can’t read without all hitting the archive sites themselves

                Great work 👍