They are a weak mechanism against individual targeted attacks, but a great mechanism for herd immunity. It's not perfect, for sure, but it helps raise the posture for the general user in a way that's easy and…
>If the host OS or the app is compromised, it won't help - the attacker can just steal the codes after they're unlocked by the enclave. If the host OS or app is compromised, then it absolutely helps! The codes cannot be…
>- Passcode or biometric locks on an app are a gimmick and offer negligible value. Biometric locks are interfaces that the OS does not expose to users, and that are backed via an HSM. On the iPhone and modern Android,…
They are a weak mechanism against individual targeted attacks, but a great mechanism for herd immunity. It's not perfect, for sure, but it helps raise the posture for the general user in a way that's easy and…
>If the host OS or the app is compromised, it won't help - the attacker can just steal the codes after they're unlocked by the enclave. If the host OS or app is compromised, then it absolutely helps! The codes cannot be…
>- Passcode or biometric locks on an app are a gimmick and offer negligible value. Biometric locks are interfaces that the OS does not expose to users, and that are backed via an HSM. On the iPhone and modern Android,…