Stop Using Your Face or Thumb to Unlock Your Phone
Stop Using Your Face or Thumb to Unlock Your Phone
The laws surrounding 5th Amendment protections and biometric passwords are still undecided, so just turn it off.
Are there any legal experts that want to weigh in on this.
Can the police in New Zealand force unlock your device with your biometrics?
How does this work with NZ law?
IANAL but this seems to be pretty common all across the world. The usual recommendation is to put your phone in "lockdown" mode if there's any suspicion you may get arrested. This prevents the phone from being unlocked with biometrics and require pin.
You can do this either by restarting or turning off your phone, or a button combination (power + volume up on my android) and selecting lockdown.
Holding power + volume down in an iphone until the power off menu comes up disables faceid until you log in with your pin as well
Also for iPhone: If you press just the side button/lock button five times in quick succession, it will also go into lockdown mode and can only be unlocked with a pin. A little easier to covertly do as it’s just a button mash before you get nabbed.
Thanks for the info, I doubt I'll need it, but it is always good to know.
Just a note, on a Samsung, go to settings and search for "lockdown" to enable the option, then hold the power button and the option is visible.
If you're using Android you can automate lockdown mode using Tasker so that it can it can be enabled "passively". For example, on my phone lockdown happens after: too many incorrect access attempts (bad biometric or passcode), any Bluetooth disconnects, any sudden shakes or jolts. So if someone takes my phone away from me, takes my phone from my car, or if I turn off my watch then lockdown. If someone fails to unlock my phone: photo taken, synced to cloud, phone lockdown. If my phone gets tapped, set down a little to roughly, or I get thrown to the ground or against a car with my phone in my pocket then lockdown. Sure, it means biometrics is often disabled on my phone, but now I find that reassuring.
in my country they will just intimidate you to unlock it regardless of the law if they really want to
My autistic ass who doesn't use bioauthenticators thought this meant I shouldn't enter the passcode with my thumb or nose
Imstructions unclear. Phone in ass.
If you close your eyes the face id won't work. I suppose the police could force you to open your eyes somehow but if they are going to do that they can force you to put your pin in too.
😌 "Look at this cute kitten" 😯
They would get me every time.
I mean, they can't force you to give up something you know if really don't want to. Torture tends to be frowned upon in government.
They can charge you for refusal and I'm pretty sure they have access to a bypass tool.
I am far more worried about people getting my code over my shoulder than a state actor.
That is an issue indeed.
I'm not a legal expert but as far as I know if the police are arresting you they can compel this in New Zealand. There is no difference in unlock methods. People get charges for not complying.
This page seems to back this up but it is old.
It links to the legislation which seems to support it:
A person exercising a search power in respect of any data held in a computer system or other data storage device may require a specified person to provide access information and other information or assistance that is reasonable and necessary to allow the person exercising the search power to access that data.
Effectively, if the police search is otherwise legal, then they can compel you to unlock your phone. If you don't, you can get up to 3 months in prison:
178 Offence of failing to carry out obligations in relation to computer system search
Every person commits an offence and is liable on conviction to imprisonment for a term not exceeding 3 months who fails, without reasonable excuse, to assist a person exercising a search power when requested to do so under section 130(1).
However, section 130 (2) says:
A specified person may not be required under subsection (1) to give any information tending to incriminate the person.
But clarifies in 130 (3):
Subsection (2) does not prevent a person exercising a search power from requiring a specified person to provide information or providing assistance that is reasonable and necessary to allow the person exercising the search power to access data held in, or accessible from, a computer system or other data storage device that contains or may contain information tending to incriminate the specified person.
So basically, if the data used to unlock your phone can incriminate you, you don't have to provide it. But that doesn't protect you from incriminating evidence on your phone.
So I guess the moral of the story is that if you're a drug dealer, make sure your phone password is "ImADrugDealer" and then you can't be forced to provide that information. But I guess they can force you to unlock it without telling them the password? so I'm not sure what section 130 (2) had in mind.
(I'm also not a legal expert 🙂)
This feels weird to me. If your password is "ILikePotato", which is then used to decrypt a text file that contains "IStoleTheMonaLisaAndReplacedItWithAPhotocopy", how is that any different in terms of "incriminating yourself" than if it was the other way around..?
And if you actually forgot your password, that's 3 months jail for you, because they'll hardly believe you? Better have just one so you'll surely remember!
I wonder, if you use special markings to keep track of your illegal doings, and one of your notebooks is found during a search, are you required to assist in deciphering the contents of it? That's basically the same thing as decrypting your hard drive.
I wouldn't be too worried. 3 months in prison is what kiwis get for murder. You're more likely to get a month holiday at home detention on xbox duty.
Forcing someone to unlock their phone after being arrested for something unrelated, is no different than them forcing you to unlock your house so that they can rifle through your stuff looking for additional things to charge you with. It's immoral, and it should be illegal. The government found new ways to circumvent people's rights with the digital world, and they're walking all over people's liberty.
For Android:
Power+Volume up > Lockdown.
Takes a fraction of a second.I assume iPhone has something similar.