Sunday, November 23, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Regin Trojan Enables Stealthy Surveillance: Symantec
ASTC Says 100 TB HDDs Coming in 2025
Alienware Alpha PC Gaming Console Now Shipping
Samsung Files ITC Complaint Against Nvidia
Europe To Ask Google Unlink Its Commercial And Search Services
Streaming TV Service Aereo Files for Bankruptcy
Square Launches Cash Register Service
Call of Duty: Advanced Warfare is the Biggest Entertainment Launch of 2014
Active Discussions
cdrw trouble
CDR for car Sat Nav
DVD/DL for Optiarc 7191S at 8X
Copied dvd's say blank in computer only
Made video, won't play back easily
New Features In Firefox 33
updated tests for dvd and cd burners
How to generate lots of different CDs quickly
 Home > News > Mobiles > Securit...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, October 04, 2013
Security Firm Hacks iPhone Fingerprint Scanner


A German security company has figured out an easy way to crack the fingerprint scanner of the new iPhone 5S.

Berlin's Security Research Labs (SRL) published a video demonstrating the newly discovered flaw.

SRL, which has also disclosed a major security flaw in SIM card technology that affected mobile systems around the globe, said it has shared its research with Apple's security team.

According to SRL, using fingerprints as credentials for local user authentication has two shortcomings when compared to passwords. Once a fingerprint gets stolen, there is no way to change it. To offset this high compromise penalty, fingerprints would need to be very hard to steal. However, users leave copies of their fingerprints everywhere; including on the devices they protect. Fingerprints are not fit for secure local user authentication as long as spoofs ("fake fingers") can be produced from these pervasive copies.

"The iPhone 5s?s fingerprint sensor does not only appear to provide no additional protection, its use even undermines other security mechanisms," SRL said.

The iPhone 5s has moved slightly beyond the capabilities of earlier touch sensors: It provides a higher resolution image of the users' fingerpints and according SRL, it uses this higher resolution to match based on finer structures. However, SRL claims that even these finer structures can be spoofed, for example based on an equally high resolution smartphone camera image, showing that some defense strategies only improve at the pace of the corresponding attack technique.

"Fingerprint spoof prevention would better be based on intrinsic errors in the spoof-creation process or on fingerprint features not present in latent prints (and become much harder to steal)," SRL added.

The iPhone 5s, on the other hand, was defeated by techniques widely published years ago.

The researhcers also identified vulnerability that could potentially give criminals time to break into the phones, gain complete control of data, access email accounts and then potentially take over the user's bank accounts.

In this video SRL demonstrated how other flaws in iOS and iCloud are exposed that ? when combined with Touch ID?s vulnerability to fingerprint spoofing ? allow for online identity theft.



Previous
Next
LCD TV Panel Shipments Dip in Q3 For The First Time        All News        New Acer and Gateway All-in-Ones Arrive Soon
Cisco, Google, SAP Considering Bids For BlackBerry: report     Mobiles News      Samsung Posts Record Earnings, HTC Under Pressure After Loss

Get RSS feed Easy Print E-Mail this Message

Related News
Apple To Bundle Beats to iOS: report
Apple WatchKit Software Tools Now Available
UnionPay Payment Option Now Available For or Chinese Apple Customers
Samsung To Make Future Application Processors For Apple: report
Apple Downlpays Importance of "Masque Attack" To iOS Devices
Apple To Face Lawsuit Over Vanishing iPhone Text Messages
Apple May Change Flash NAND Used in New iPhones
WireLurker Malware Targets Apple Devices
Apple Becomes The Most Powerful Mobile Brand In China: survey
Christie's To Auction Original Apple Computer
Apple's Tim Cook Declares His Sexual Orientation
GT Advanced Technologies Reaches Settlement Agreement With Apple

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .