Someone Hacked Apple’s Touch ID. It’s Not Nearly as Safe as You Think.
A developer managed to decouple Apple’s Touch ID sensor from its ecosystem and make it work standalone. The internet celebrated. But the sensor was never the security — Apple’s Secure Enclave was. Without hardware-level attestation, this impressive hack is just a fancy fingerprint reader that can be spoofed with a gummy bear. The open-source community keeps confusing impressive engineering with secure engineering.