[BrianEatWorld]

I saw the CCC video and I think you are right, a suitable print being found on the phone is a bit slim, although not impossible.

However, I think the point of the article is that you can change a compromised password, you can't change a compromised fingerprint. As is mentioned, there are plenty of databases with fingerprint information. Also, for the crowd that is paranoid about government accessing their data, an authority might have an easier time getting into a device when they already have your fingerprint as opposed to figuring out your passwords.

[mikeash]

But you can change a compromised fingerprint, to a password.