Daily iOS
Security

Biometric authentication

This code sets isUnlocked = true when Face ID succeeds and opens the transfer screen. What's the security weakness in this approach?

let ctx = LAContext()
ctx.evaluatePolicy(.deviceOwnerAuthenticationWithBiometrics,
                   localizedReason: "Confirm transfer") { ok, _ in
    if ok { self.isUnlocked = true }
}

Submit