amit
amit
Apparently, Google’s face unlock on Pixel 4 can allow access to a user even if he has his eyes closed. This comes around the same time when a critical bug was detected in the fingerprint unlock on Samsung’s Galaxy S10 devices. Both the companies put out a completely tone-deaf first resp... blog.amitgawande.com
|
Embed
Progress spinner
hjertnes
hjertnes

@amit this is the reason there isn’t a reasonable alternative to an iPhone for me. And if I were to ditch my iPhone it’s more likely that I’d not have a phone

|
Embed
Progress spinner
amit
amit

@hjertnes A completely valid justification to stay on iPhone. But I just feel there are equally valid justifications that push some (majority) of the people away from the platform. Cost is just one factor -- there is a price that one has to pay to get the most secured and private device. Many cannot afford or fail to justify paying that price.

So it is necessary that the competition (who charge almost same price as iPhones) wake to the reality that they aren't thiking enough about security.

|
Embed
Progress spinner
jmreekes
jmreekes

@amit @hjertnes I just posted about this. If the Pixel 4 doesn’t ship with an attention awareness feature, Google should add one shortly but the lack of attention awareness doesn’t mean the Pixel 4 face unlock isn’t a strong biometric solution...

|
Embed
Progress spinner
hjertnes
hjertnes

@amit I'm never going to use Android for a number of reasons, I boycott Google, I think Material Design looks horrible and I have never seen any security expert say that the Android security model is as secure as the secure enclave (and the other security measures Apple have done down to hardware level)

|
Embed
Progress spinner
jmreekes
jmreekes

@amit @hjertnes ...I have attention awareness turned off on my iPhone 11 because FaceID doesn’t work with my sunglasses. FaceID is still secure, just like TouchID is still secure even though somebody could place my finger on the sensor of my work phone and unlock it while I sleep

|
Embed
Progress spinner
In reply to
hjertnes
hjertnes

@jmreekes I think the security problems with Android that I’m worried about is much more fundamental and has to do with software and hardware architecture

|
Embed
Progress spinner
jmreekes
jmreekes

@hjertnes That is a big concern. I know the Pixel 3 (and presumably Pixel 4) has a Secure Enclave type chip but I don’t know if any other Android devices do

|
Embed
Progress spinner
amit
amit

@hjertnes Sure, that's one perspective. But as I wrote sometime back, Apple has the more secure, more private platform that majority cannot afford. Android has to fill the gap.

Plus when we say Android, it is a barrage of cheap and premium devices. We may need to judge the security as a combination of both hardware and the platform. Pixel 3 and earlier Samsung premium devices have provided well-designed, secure options for fingerprint biometric.

|
Embed
Progress spinner
amit
amit

@jmreekes I think attention awareness is key for face unlocking - sure, if it doesn't work for you specifically, you have to disable it. I think Apple must have identified this possibility during their tests. So they provided the option.

In an ideal world, there is no need for this particular option.

|
Embed
Progress spinner
hjertnes
hjertnes

@amit how much cheaper would a android phone be compared to for example an iPhone 8?

|
Embed
Progress spinner
amit
amit

@hjertnes In India and similar markets, an equally spec'd and well featured device can be purchased for 4 times a lower price (~500USD for iPhone 8 vs ~125USD for mid-range android). Lower end android are even cheaper.

|
Embed
Progress spinner
hjertnes
hjertnes

@amit okay. It is a good point, but I’m lucky enough to have the resources to not be in the situation to having to bend over for google

|
Embed
Progress spinner