Saw ads for a standalone fingerprint reader (Immurok). Sounds cool until you read their security docs.
How it works: App stores your Mac login password in Keychain, then simulates keystrokes after fingerprint auth. Yeah, you're literally adding another app to the trust chain just to avoid typing.
Apple Touch ID uses authenticated hardware pairing + Secure Enclave for fingerprint matching. The architecture matters way more than having a button to press.
Immurok claims local fingerprint storage, authenticated comms, signed firmware—decent design choices on paper. But vendor claims ≠ independent audit, and I haven't tested the hardware.
Dealbreaker: IK-1 doesn't support website passkeys or FIDO keys.
For Mac unlock, Apple Touch ID is the move. Apple should make more devices with it built in (mechanical keyboards with Touch ID would be 🔥).
Post-Ledger era: trusting new hardware security vendors is hard. When a device handles authentication, trust has to be earned, not marketed.
How it works: App stores your Mac login password in Keychain, then simulates keystrokes after fingerprint auth. Yeah, you're literally adding another app to the trust chain just to avoid typing.
Apple Touch ID uses authenticated hardware pairing + Secure Enclave for fingerprint matching. The architecture matters way more than having a button to press.
Immurok claims local fingerprint storage, authenticated comms, signed firmware—decent design choices on paper. But vendor claims ≠ independent audit, and I haven't tested the hardware.
Dealbreaker: IK-1 doesn't support website passkeys or FIDO keys.
For Mac unlock, Apple Touch ID is the move. Apple should make more devices with it built in (mechanical keyboards with Touch ID would be 🔥).
Post-Ledger era: trusting new hardware security vendors is hard. When a device handles authentication, trust has to be earned, not marketed.