Strongbox: Touch ID Should be reset when finger prints has changed

[janehlers]

I sometimes let friends, family and coworkers open my iPhone by giving them the lock screen code, but if they have that they can change fingerprints and thereby open Strongpass. Therefore open with Touch Id must be disabled when fingerprints prints has changed. My homebank and National Id system has that feature.

[mmcguill]

That's a great idea. I didn't think it was possible but your query/examples made me do a quick check and it seems possible!

https://stackoverflow.com/questions/38397477/touchid-detect-new-fingerprints-added-when-does-evaluatedpolicydomainstate-c

Hopefully an easy one to implement too... Thanks!

[georgesnow]

some other notes I found about it:

https://swiftrocks.com/detecting-touchid-fingerprint-changes.html

this developer had some interesting notes that info could be "unstable" according to Apple (no idea what that actually means), but seems like there is fairly reliable way to implement it

[mmcguill]

Thanks @georgesnow - I don’t think it’s such a big issue here, as long as it only used for Database Unlock (not App Lock).

If the old state changes, we simply ask the user to re enter their credentials and store again... it’s a good idea in general to require full master credentials entry periodically either way (something I hope to bring as a feature soon)

[mmcguill]

This feature is available with 1.45.6 which was released today. I've done my own testing, but would be nice to have a few other datapoints to confirm this is working as expected...

[janehlers]

Hi
I just tested on my iPad and it works great. Thank you for adding this so quickly.

Kind regards
Jan Milter Ehlers

Den 18. jan. 2020 kl. 14.29 skrev Mark McGuill [e-mail]:


This feature is available with 1.45.6 which was released today. I've done my own testing, but would be nice to have a few other datapoints to confirm this is working as expected...

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

[mmcguill]

Excellent, glad to hear it, thanks for the suggestion...