Natanson said she does not use biometrics for her devices, but after investigators told her to try, “when she applied her index finger to the fingerprint reader, the laptop unlocked.”
So tired of the "if you're not doing anything wrong, then you have nothing to hide" and "if you care too much about privacy, then you seem suspicious" lines.
People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I've raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives...
That makes the most sense. It was probably set up the day she got it as part of the onboarding process and then she never used it and forgot about doing something that took 30 seconds several years ago.
Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk
Not sure about the laptops; probably best to do a password there.
Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.
That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.
Just tested it and can confirm it works. For those that don't have their phone handy or are worried about trying it:
Just 5 presses is enough. You could do 6, or just spam the power button to make sure you've got at least 5 in. Any presses after the 5th don't do anything different
when you do it, it opens up a menu with options to:
Power off
Make an emergency phone call to 911 (there is no option to select an emergency contact. It just calls 911 immediately)
Show emergency medical info
Afterwards, you need to enter in your pin/passcode to unlock your phone. I have Face ID and the ability to unlock my phone via my Apple Watch. Both methods are disabled until I unlock my phone with my code.
Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.
No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.
It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.
between the hotspots of fingerprints and shoulder surfing risk
If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and """assist""" you into touching your privates (aka biometrics).
Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.
This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.
Lock down will do things like disable biometrics, but the phone has still been unlocked and is no longer in a fully encrypted state like it is if powered off.
I once met a guy who robbed a bank with a fake gun. (There was once an article somewhere but this was maybe 12 years ago.) He did some time in prison and he said they gave him the fake gun back afterwards.
In the future, you can go to archive.ph and put in the url and it’s usually already been archived. There are some paywalls it doesn’t get through, but it handles most of them.
lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)
If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷♀️
If you’re gonna share articles you should actually share them
Pho es need a Burndown mode by default. Enable it, and it will continue to operate normally for 6 hours or so, during which time you can disable Burndown. But if you don't, it automatically wipes your data.
No doubt it would be illegal and no manuf would ever actually do it, because it could be construed as destroying evidence. But an automatic Burndown would give you the plausible deniability that you just happen to have a new secondhand phone which hasn't yet been set up.
75 Comments
Encephalotrocity@feddit.online · 105 pts · 214d
Use biometric security at your own risk.
otter@lemmy.dbzer0.com · 54 pts · 214d
Just don't. No pussyfootin' around. Every single person the US has access to is a possible "suspect" for anything it claims.
Act like it, citizens. Protect yourself, then help others to do likewise.✊🏼
wonderingwanderer@sopuli.xyz · 4 pts · 213d
So tired of the "if you're not doing anything wrong, then you have nothing to hide" and "if you care too much about privacy, then you seem suspicious" lines.
People have given away their own data security little by little, and the surveillance state is already cooked into most of our hardware. I've raised a fuss about it all along the way, and people always thought I was some weirdo doomsday conspiracy theorist, or hiding something on my hard drives...
evasive_chimpanzee@lemmy.world · 29 pts · 214d
So basically, the reporter said she doesnt use it, but that was just a lie she got called out on?
Ptsf@lemmy.world · 45 pts · 213d
Or it was setup at one point by whomever assists her with IT and she forgot. Lots of possibilities when you're dealing with humans
BartyDeCanter@lemmy.sdf.org · 6 pts · 213d
That makes the most sense. It was probably set up the day she got it as part of the onboarding process and then she never used it and forgot about doing something that took 30 seconds several years ago.
FleetwoodLinux@lemmy.zip · 14 pts · 213d
Even then, why not just use the wrong finger(s) enough times to disable biometrics there too?
TrippaSnippa@aussie.zone · 12 pts · 213d
They "assisted" her to put her finger on the fingerprint reader (i.e., grabbed her hand and forced her finger onto it).
FleetwoodLinux@lemmy.zip · 4 pts · 213d
Ah no good then :/
Tinidril@midwest.social · 2 pts · 212d
That's why I unlock my phone with my genitals.
lka1988@lemmy.dbzer0.com · 13 pts · 214d
The only thing of mine that uses biometrics is my phone, and that is very easy to put into lockdown mode.
Lucidlethargy@sh.itjust.works · 5 pts · 213d
I've never used this. Not in the entire time I've owned phones and computers.
For those protesting ICE right now, do NOT use face recognition or finger prints. Turn that shit off and never turn them back on.
CompactFlax@discuss.tchncs.de · 63 pts · 214d
Six presses on the power button and iPhones disable biometrics. I believe for most threat models, biometrics is better than typing a passcode, between the hotspots of fingerprints and shoulder surfing risk. Lock out biometrics before sleeping or other leaving unattended scenarios if raids are a risk
Not sure about the laptops; probably best to do a password there.
fonix232@fedia.io · 51 pts · 214d
Biometrics are an issue because in most jurisdictions (not just the US but globally), you can't be coerced to provide your password/passcode - but absolutely nothing stops LE from forcing you to provide biometric data to unlock the device.
CompactFlax@discuss.tchncs.de · 28 pts · 213d
That’s the point of the biometric lockout. Most people are not in a situation where they can be compelled at any second to unlock their device; however if they’re pulled over or on community patrol, they can press six times and it disables the biometrics.
CocaineShrimp@sh.itjust.works · 21 pts · 213d
Just tested it and can confirm it works. For those that don't have their phone handy or are worried about trying it:
ButteryMonkey@piefed.social · 19 pts · 213d
Just to clarify and expand a bit: It’s 5 presses not 6, and you can do it in your pocket because it gives you a haptic feedback signal when it works, of a quick vibration in a unique pattern.
fahfahfahfah@lemmy.billiam.net · 2 pts · 213d
It’ll also trigger a call to 911, which is gonna be hard to disable in your pocket
Edit: this is configurable behavior
ButteryMonkey@piefed.social · 13 pts · 213d
No it doesn’t. It just locks the screen and requires passcode. It’s the same thing that happens if you hold power and volume to bring up the emergency call or power off screen.
fahfahfahfah@lemmy.billiam.net · 10 pts · 213d
I just tested on my iPhone and it does. Guessing it’s a setting.
… and after checking it is indeed a setting. Not sure if I turned that on or if it was on by default.
scytale@piefed.zip · 2 pts · 213d
Which setting is it?
fahfahfahfah@lemmy.billiam.net · 1 pts · 213d
Emergency SOS, few different settings in there that change the behaviour
RestrictedAccount@lemmy.world · 4 pts · 213d
It did for a hot minute. I just checked and it no longer does.
despoticruin@lemmy.zip · 1 pts · 213d
UnspecificGravity@piefed.social · 12 pts · 213d
It depends on what your risk profile looks like. Sure, from a generalized risk standpoint punching in a number is vulnerable to physical snooping, but for folks who live in police states the greater risk is your information being accessed by people who physically have you in custody and can physically force you to use your biometrics to unlock a device.
irelephant@anarchist.nexus · 4 pts · 213d
Tried this on my pixel and it opened the emergency call menu.
xorollo@leminal.space · 1 pts · 213d
On pixel it's double tap the home screen.
Thisiswritteningerman@midwest.social · 0 pts · 213d
Tollana1234567@lemmy.today · 2 pts · 213d
turning the phone off also disables the biometrics if you turn it on again, it requires whatever lockout method you used previously
lambalicious@lemmy.sdf.org · 2 pts · 213d
If ICE is close enough to you to shoulder surf you, they are close enough to manhandle you, shove you and """assist""" you into touching your privates (aka biometrics).
CompactFlax@discuss.tchncs.de · 1 pts · 213d
That would fall under the scenarios in which you should have your phone locked out.
BK-201@fedia.io · 17 pts · 213d
on Android, you can Press and hold the power button. a menu with 4 options will appear, the top right is the lockdown.
Zorque@lemmy.world · 9 pts · 213d
My phone decided to change what holding the power button does at some point, so watch out for that.
For those wanting to ensure theirs does the same, at least for Samsung, it's under:
Advanced Features > Side Button > Long Press
Harvey656@lemmy.world · 6 pts · 213d
Mine doesn't even have the option. Seriously made a mistake with going samsung.
scoobford@lemmy.zip · 7 pts · 213d
It's been a while since I had a Samsung, but iirc there's an option to add it to your power menu.
More importantly, rebooting or powering off the phone is more secure anyways. You should just do that in 99% of circumstances.
Lucidlethargy@sh.itjust.works · 4 pts · 213d
This does not work on all android phones. Does nothing on the OnePlus.
Fish@midwest.social · 1 pts · 213d
Trilogy3452@lemmy.world · 0 pts · 213d
It requires a regular pin if you have buometrics set up, doesn't shpw notifications
LorIps@lemmy.world · 3 pts · 213d
Oooohh, I always thought that was screen lock.
Ludicrous0251@piefed.zip · 3 pts · 213d
What's the difference between lockdown and just rebooting your phone (putting it into the first-run state)?
PM_Your_Nudes_Please@lemmy.world · 4 pts · 213d
Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.
This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.
NotMyOldRedditName@lemmy.world · 3 pts · 213d
Lock down will do things like disable biometrics, but the phone has still been unlocked and is no longer in a fully encrypted state like it is if powered off.
Fish@midwest.social · 1 pts · 213d
einfach_orangensaft@sh.itjust.works · 14 pts · 213d
every time such a storie appears i assume its a cover lie / marketing for apple.
jaybone@lemmy.zip · 13 pts · 213d
Do they return the device afterwards like “oh well, here ya go then” durp durp. Or do they keep it “for evidence” out of spite?
dejected_warp_core@lemmy.world · 6 pts · 213d
Probably not.
sukhmel@programming.dev · 23 pts · 213d
Well, that just sounds amazing and not at all exploitable
scrubbles@poptalk.scrubbles.tech · 15 pts · 213d
Seems a bit opposite of the whole "innocent until proven guilty" thing
Madison420@lemmy.world · 6 pts · 213d
Seized property under rico works the exact opposite, you have to prove your property innocent.
cassandrafatigue@lemmy.dbzer0.com · -1 pts · 213d
Lol
modus@lemmy.world · 4 pts · 213d
I once met a guy who robbed a bank with a fake gun. (There was once an article somewhere but this was maybe 12 years ago.) He did some time in prison and he said they gave him the fake gun back afterwards.
sukhmel@programming.dev · 3 pts · 213d
Did they say «see you later»?
cassandrafatigue@lemmy.dbzer0.com · 3 pts · 213d
Why would they give you your shit back? They're cops, not humans.
ikidd@lemmy.world · 1 pts · 213d
They beat you to death with the phone and then rape your wife with it.
IhaveCrabs111@lemmy.world · 2 pts · 213d
gustofwind@lemmy.world · 11 pts · 214d
Got I hate fucking paywalls
ButteryMonkey@piefed.social · 8 pts · 213d
Here’s an archive link for you.
https://archive.ph/cvFNb
In the future, you can go to archive.ph and put in the url and it’s usually already been archived. There are some paywalls it doesn’t get through, but it handles most of them.
gustofwind@lemmy.world · 7 pts · 213d
I know but it irritates me to add that step for every single article (how is OP viewing it too?)
Blessed is the OP who simply provides the archived link as well
When I’m in mobile I often won’t even bother and just go about my day
Ludicrous0251@piefed.zip · 3 pts · 213d
Blessed is the OP who fully utilizes their adblocker.
gustofwind@lemmy.world · 2 pts · 213d
lol I use an adblocker and that results in most paywall articles not displaying anything at all or just breaking the website (your link doesn’t display the article under my AdGuard or uBlock)
If it needs more configuration than I’ve already given it the real problem is you not just posting the archive link with it 🤷♀️
If you’re gonna share articles you should actually share them
Ludicrous0251@piefed.zip · 0 pts · 213d
I'm sorry, your poor system configuration is my problem? Getting blank pages is a you problem.
gustofwind@lemmy.world · 3 pts · 213d
You’re the one sharing articles dude so unless you don’t want people to read them I’m not sure what your position here is
By all means continue sharing paywalled articles that 99% of people can’t read without all hitting the archive sites themselves
Great work 👍
sukhmel@programming.dev · 1 pts · 213d
On their phone, I hope?
Ludicrous0251@piefed.zip · 1 pts · 213d
Firefox Android + uBlock Origin = magic.
sukhmel@programming.dev · 1 pts · 213d
Don't know if you care, but with uBlock origin on Firefox mobile and this list the article is still behind the pay wall
Ludicrous0251@piefed.zip · 1 pts · 213d
There's 2 lists.
deacon@lemmy.world · 11 pts · 213d
Remember iPhone users: 5 quick presses of the side button will disable biometric unlock and require a PIN.
Suburbanl3g3nd@lemmings.world · 2 pts · 213d
Or just turn off the biometrics on the lock screen to begin with. It's not nearly the income it seems
horse@feddit.org · 7 pts · 213d
In case anyone is wondering what Lockdown Mode on Apple Devices does (it's not just disabling biometrics): https://support.apple.com/en-gb/105120
Hux@lemmy.ml · 6 pts · 213d
Paywalled.
If you just want to learn about Lockdown Mode, here ya go:
https://support.apple.com/en-us/105120
NigelFrobisher@aussie.zone · 5 pts · 213d
Isn’t the Washington Post state media now anyway?
dandelion@lemmy.blahaj.zone · 2 pts · 213d
when Jeff Bezos bought them and began to interfere with their editorial independence, they certainly lost integrity
wonderingwanderer@sopuli.xyz · 3 pts · 213d
Why is the FBI searching journalist's devices?
Oh wait, it's 2026. Yeah, that tracks...
Agent641@lemmy.world · 3 pts · 213d
Pho es need a Burndown mode by default. Enable it, and it will continue to operate normally for 6 hours or so, during which time you can disable Burndown. But if you don't, it automatically wipes your data.
No doubt it would be illegal and no manuf would ever actually do it, because it could be construed as destroying evidence. But an automatic Burndown would give you the plausible deniability that you just happen to have a new secondhand phone which hasn't yet been set up.
Corporal_Punishment@feddit.uk · 1 pts · 213d
Most android phones you can wipe remotely. Obviously this doesnt help if someone has seized your phone and immediately put it in a Faraday cage
Ludicrous0251@piefed.zip · 1 pts · 213d
GrapheneOS has a duress pin
Zephorah@discuss.online · 0 pts · 214d