Hacker News new | past | comments | ask | show | jobs | submit login

Your failure to research the feelings behind this statement is obvious. Fingerprints on an iOS device are stored in the Secure Enclave, a hardware module on the device itself, used for checking fingerprints, answering yes or no to the question "is this the user's fingerprint?"

As for Apple Pay, your card details are used once -- exactly once -- to generate an obfuscated alias card identifier, again, only useable by the device.

There is no database. Fingerprint data doesn't leave the phone. No one stores your credit card details.

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Research before writing.




It seems dangerous to have the scanner on the device and I don't trust it to be safe. It's the print I'm concerned with not the hashes and crypto that connect you to payment. This is something enticing to authorities and I'm sure they'll want to figure out how to get it.


Well, getting the actual fingerprint is probably like getting the original message out of a hash function...

So they can want all day, at the end, entropy wins (by design in this case).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: