Post B2zLEgf2o8Dti5soBk by dangoodin@infosec.exchange
 (DIR) More posts by dangoodin@infosec.exchange
 (DIR) Post #B2zLEcykUvbmI34ULY by dangoodin@infosec.exchange
       2026-02-04T19:01:05Z
       
       0 likes, 0 repeats
       
       Anybody know how feasible it would have been for the WaPo reporter to refuse to provide her biometrics, or intentially sabotage the attempt by, say, using her wrong finger or closing her eyes? She might go to jail, but that's what reporters do to protect sources.
       
 (DIR) Post #B2zLEePNBQV0iuXGU4 by adamshostack@infosec.exchange
       2026-02-04T19:21:56Z
       
       0 likes, 0 repeats
       
       @dangoodin I think they can force your finger onto the sensor (much like they can force fingerprints on an ink pad) and force you to open your eyes. Those are "non-testimonial" where if your password was, I dunno, "IkilledBob" then that's testimonial and the courts can't force you to self-incriminate.
       
 (DIR) Post #B2zLEfcsegtkV5rZB2 by dangoodin@infosec.exchange
       2026-02-04T19:41:44Z
       
       0 likes, 0 repeats
       
       @adamshostack How can cops force a journo to open her eyes? Can't she just refuse, or promise to keep her eyes open and then close them at the crucial moment? And what if she uses a finger she hasn't registered? In either case, the device would then require a password. This seems feasible to me, and maybe that's what the WaPo reporter did, but maybe I'm missing something?
       
 (DIR) Post #B2zLEgf2o8Dti5soBk by dangoodin@infosec.exchange
       2026-02-04T19:46:58Z
       
       0 likes, 0 repeats
       
       @adamshostack I mean, the journo may be charged, but journos (at least reputable ones) will go to jail to protect sources in other cases.
       
 (DIR) Post #B2zLEhVrdkTSLuazWC by nicholas@aklp.club
       2026-02-04T20:12:23.705790Z
       
       1 likes, 0 repeats
       
       I believe there is currently a circuit split on forcing biometric auth. The concern is not being held in prison while your lawyer works the system, the concern is being charged with obstruction, or aiding and abetting by sabotaging forced biometric auth in those circuits where it is authorized. It's easy for folks who have never faced prosecution with years of prison on the line to tell others what their professional ethics should dictate.