Discussion
Loading...

Post

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Dave Wilburn :donor:
@DaveMWilburn@infosec.exchange  ·  activity timestamp 2 months ago

PSA, the new Android 16 update will surreptitiously reenable fingerprint device unlock even if you had intentionally disabled it before. Depending on where you live and your threat model, this might not be safe! Americans have little protection against law enforcement compelling biometrics unlock. To make matters worse, the fingerprint unlock settings are found in a different part of the security settings UI than the rest of the device unlock settings. If you update to Android 16, make sure your device unlock settings are what you intended.

#android #android16

Fingerprint unlock settings are housed in a completely different part of the Android 16 settings UI from the rest of the device unlock settings. Note that "unlock your phone" somehow became reenabled after upgrading to Android 16 despite being previously disabled.
Fingerprint unlock settings are housed in a completely different part of the Android 16 settings UI from the rest of the device unlock settings. Note that "unlock your phone" somehow became reenabled after upgrading to Android 16 despite being previously disabled.
Fingerprint unlock settings are housed in a completely different part of the Android 16 settings UI from the rest of the device unlock settings. Note that "unlock your phone" somehow became reenabled after upgrading to Android 16 despite being previously disabled.
Device unlock settings under Android 16, configured for PIN unlock. Fingerprint device unlock does not appear as an option here.
Device unlock settings under Android 16, configured for PIN unlock. Fingerprint device unlock does not appear as an option here.
Device unlock settings under Android 16, configured for PIN unlock. Fingerprint device unlock does not appear as an option here.
  • Copy link
  • Flag this post
  • Block
Dave Wilburn :donor:
@DaveMWilburn@infosec.exchange replied  ·  activity timestamp 2 months ago

For people that might be confused about why this is important, it's due to a nuance of American law. In the US, with few exceptions, you cannot be compelled to testify against yourself under the fifth amendment. That includes providing something you know like a PIN or password. However, you can be compelled to provide biometrics, and it is not uncommon for American police to forcibly unlock your phone with your face or other biometrics for nonconsensual searches, even without a court order. This is a real risk for Americans encountering an increasingly authoritarian government, including at protests, police checkpoints, border crossings, military occupations of US cities, and ICE raids.

If you aren't a US citizen or resident, then it's possible that this information doesn't apply to you.

  • Copy link
  • Flag this comment
  • Block
Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.0 no JS en
Automatic federation enabled
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login