Culver: Register only one thumb to intentionally trigger iPhone passcode lockouts
Leah Culver · Leah Culver of Breaker and Tom Sparks of YC Answer Your Questions About Security and Podcasting · Y Combinator · Jan 5, 2018 · at 4:28
Leah Culver, co-founder of Breaker, explains her personal operational security technique for preventing compelled biometric phone unlocking.
0:00 / 0:09exact quote · 9.4s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“I tend to only put one of my thumbs in the thumbprint so that if I needed to, I could use my other thumb and just pretend like, oh, it's just, I'm nervous. It's not working. Until it locks me out.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Leah Culver
Culver: Law Enforcement Accesses Biometrics More Easily Than iPhone Passcodes
“I think it's much easier for law enforcement to access your phone via touch ID, like you were saying through touch ID or facial recognition. But the nice thing Apple does is if you have three failed attempts, Or if you shut off your phone, you have to reenter …”
Culver: Passwords surpass biometrics because compromised credentials can be replaced
“What's really nice about the device and something you remember is you can replace it. So if it were to get stolen, so if someone takes a cast of your It's a lot harder to change your thumbprint than it is to change your password, right? So a nice nice security…”
Culver: User error is the number one security concern in crypto
“Some of the biggest security concern right now, I'd say the number one is user error, right?”
Culver: Producing a TV show is roughly 100x more expensive than a quality podcast
“It's like a hundred X more expensive to produce a television show than to produce a podcast, a quality podcast.”
Culver: iOS developers must store sensitive data in Keychain, not Info.plist
“Big thing for me is keeping private data in the key chain. It's an iOS developer and not in any other local files, especially not in NS user defaults or putting it in the info.plist file. Don't put stuff in there. You can unzip An app directory to look at anyo…”
Culver: Secret management is a huge market opportunity in developer security
“I think there's a huge opportunity in security to do sort of secret management. Like, right now, things are just like, oh, put in an n variable, or whatever, it's like so bad, and for us, as soon as you have a team of more than, like, two people, you need to b…”