Remove 72 hour password requirement from Biometrics

[_Thanks__Samscum_]

Remove 72 hour password requirement from Biometrics.

Dumb feature and got banned last time i posted.

[arianwen27]

It's a serious security feature. Fingerprint is a lot less secure than a password and can be "hacked". Locking it after a few days ensures a stolen device can't be unlocked or bypassed. Eg, it means a theif only has 3 days to hack a phone or cheat the sensor. Not enough time to do much.

Face unlock has an even shorter time. I believe that's 24 hours. And it drops to 4 hours if the device hasn't moved in a while.

To be extra elaborate. It guards against keeping a phone running for months till an exploit is found. It stops someone say picking through your rubbish, finding a plastic cup, locating a fingerprint on the cup, making a replica, unlocking the phone. Plus since S series phones are glass, they keep fingerprints. And other methods that probably exist

If users got the option to disable it, they would, then there'd be loads more stolen phones and data.

Theoretically a trusted agent app specifically made to bypass the timeout could be possible. Though I'm not aware of any right now. Trusted agent are apps that are allowed to unlock devices and modify lock status. But again, this is theory, probs doesn't and won't exist.

[BandOfBrothers]

Personally @_Thanks__Samscum_ I want all the Security protocols possible in order to protect my phone. 

However I appreciate people want different things. 

Therefore you can send feedback directly to Samsung via your Samsung Members App too for Samsung to Analyse. 

If i can be of any further help please don't hesitate to ask  😎 

[Thanks_Samscum_]

"It's a serious security feature. Fingerprint is a lot less secure than a password and can be "hacked". Locking it after a few days ensures a stolen device can't be unlocked or bypassed. Eg, it means a theif only has 3 days to hack a phone or cheat the sensor. Not enough time to do much"

This is all misinformation.  The data is on the phone regardless of lock method.  If its stolen, someone has all the time in the world to gain access.  More useless comments on an actual issue no one is addressing.

[Thanks_Samscum_]

Personally i don't need a large cooperation force feeding me settings on a device i own.

No one on this planet will ever come into a situation where this setting will benefit them.

The fact that its a locked setting behind anti root measures is the problem.

I will turn it off and trip knox who cares at this point.

Thanks again Samscum!

[arianwen27]

You dont seem to understand how phone security works. The phone itself is secured in a way that it's mathematically unfeasible to crack directly. The way into a phone is through weaker entry methods. Fingerprint is relatively weak security method when the imprint if your finger could be on the glass.

Even police phone cracking devices dont just "all the time in the world" criminals phones. They use exploits and other methods to get them open. Apple even added a feature where iphones turned on and not touched for a week will self reboot. This was because police would lock them in evidence, keep them running for months till an exploit was found. As you cant directly crack a phone, and biometrics disable shortly after they are captured.

Tldr, without using one of the normal unlock methods. Being fingerprint face and device code. All the time in the world isn't enough to crack a phone. They use good encryption methods as everything should. Plus trying to brute force the nornal code will permantly disable that method. Think "this iphone is disabled". Want an estimate on how long it'd take to brute force it? Have a look how long cracking aes 256 bit takes.

To add more to the iPhone thing, when a phone is unlocked for the first time, the data is decrypted and everything is unlocked and running. In this state, it is much easier to crack as the master unlock code android uses is in memory and being used. You just need to bypass the lock screen. Though doing that still requires an exploit unknown to the phone maker. If a phone is rebooted, it doesn't know its own master unlock code. So even if you bypass everything, you can't get data from it. So law enforcement keep phones running for a long time to use cracking tools such as a celibrate machine. Those use exploits to crack phones. A brute force is possible if flaws exist. Eg, some devices are cracked by using obscure recovery menus to get infinite tries at the main unlock code the user set. Good phones limit the number of tries for unlock methods.

A true device brute force IS possible. But it'd take longer than the estimated lifespan of the universe

[Thanks_Samscum_]

More useless banter.

Its a dumb feature that the world dislikes and has no real world application.

I wish people would contribute on these forms instead of talking to wall.

Thanks anyways?

[arianwen27]

You're the only person here who believes weaker security is better. Can you not be bothered entering your code once every few days?

[Thanks_Samscum_]

I'm not. Google around.

Entering the password at inopportune times is more of a vulnerability than its worth.

Cameras are everywhere.  People shoulder surf.  Bios cant be peeked.

Its garbage security and a forced feature.

But please continue to reply and contribute nothing.

[arianwen27]

The identity check system added in one ui 7 protects against shoulder surfing btw. I can't really explain the complex nature of device security and encryption to a brick wall so this is on you lol. If you dislike good security, you are free to go with a less secure phone manufacturer.