Hacker News Reader

I am sure you can find a way to explain, it is not that hard.

Touch ID is a lot! No more password entering on iTunes. A godsend for someone who has a 26 characters passphrase like me.

View on HN

If you have a 26 character passphrase, then how are you having an easy time trusting the fingerprint auth?

It is my fingerprint. Why shouldn't I trust it?

It's not about your fingerprint though. It's just that cheap scanners are easy to trick and you leave fingerprints everywhere, including on the very surface you scan it on.

Scanners like the one used only work with live fingers, and read geometry deeper than the surface. You're not going to trigger it with an ordinary collected fingerprint.

If you're cautious enough to use a 26 character passphrase, why are you comfortable revealing how many characters your passphrase contains?

Because even if it's just digits and numbers, 62^26 - 62^25 is a non-brute forceable keyspace.

ah, but it is a passphrase, not a password. Limiting phrases to exactly 26 chars doesn't seem that big anymore.

Good luck brute forcing an iPhone without it locking up forever though - regardless of your semantic considerations here.

It would be kind of ingenious to publicly reveal a false character count.

(A little paranoid, though.)

Reply on news.ycombinator.com