• 0x0@infosec.pub
    link
    fedilink
    English
    arrow-up
    10
    ·
    18 days ago

    A normal user will most likely never encounter a situation where their weak password would be at risk, but are much more likely to having their biometrics forced by law enforcement or border control.

    They will rip your bandaid off and force your finger or face to scan while holding your device.

    Any weak password at all would have been better in a situation like that.

    • JRaccoon@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      5
      ·
      18 days ago

      Oh wow, things really have gotten bad over there. For me personally, the much greater risk is that I forget my phone somewhere or someone steals it and in that scenario a weak password is the larger issue.

      It seems there isn’t a single correct answer here. The threat model is different for everyone.

      • CubitOom@infosec.pubOP
        link
        fedilink
        English
        arrow-up
        3
        ·
        18 days ago

        I think the correct answer is that your device shouldn’t suggest you to have a weak password work around, it should suggest a stronger password