Hacker News new | ask | show | jobs
by elithrar 3636 days ago
> If that is indeed the case, I imagine it would make better sense to leave Touch ID disabled, unlike what this article suggests.

It entirely depends on your threat model. If you are at hacker or tech conferences, TouchID is far better as it can't be shoulder surfed. If your threat model is nation-states, then you would take a different approach. As TFA says:

> Turn the phone off before entering any situation that might lead to you being coerced to use your fingerprint to unlock the phone.