Wednesday, September 17, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Blackberry Introduces Elegant Porsche Design P9983 Smartphone
Club 3D Launches 4K Docking Station
Logitech Gives You Control of Your Smart Home with the New Harmony Living Home Lineup
New iPads And OS X Yosemite Announcements Expected Next Month
Opera Max Data-savings App to be Embedded into MediaTek's LTE SoCs
Nero 2015 Supports Burning via Smartphone, WiFi Streaming
PMC Delivers 16-port SAS and SATA Storage Controllers
Google, Facebook and Twitter Collaborate On TODO Project
Active Discussions
Yamaha CRW-F1UX
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
 Home > News > Mobiles > Securit...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, October 04, 2013
Security Firm Hacks iPhone Fingerprint Scanner


A German security company has figured out an easy way to crack the fingerprint scanner of the new iPhone 5S.

Berlin's Security Research Labs (SRL) published a video demonstrating the newly discovered flaw.

SRL, which has also disclosed a major security flaw in SIM card technology that affected mobile systems around the globe, said it has shared its research with Apple's security team.

According to SRL, using fingerprints as credentials for local user authentication has two shortcomings when compared to passwords. Once a fingerprint gets stolen, there is no way to change it. To offset this high compromise penalty, fingerprints would need to be very hard to steal. However, users leave copies of their fingerprints everywhere; including on the devices they protect. Fingerprints are not fit for secure local user authentication as long as spoofs ("fake fingers") can be produced from these pervasive copies.

"The iPhone 5s?s fingerprint sensor does not only appear to provide no additional protection, its use even undermines other security mechanisms," SRL said.

The iPhone 5s has moved slightly beyond the capabilities of earlier touch sensors: It provides a higher resolution image of the users' fingerpints and according SRL, it uses this higher resolution to match based on finer structures. However, SRL claims that even these finer structures can be spoofed, for example based on an equally high resolution smartphone camera image, showing that some defense strategies only improve at the pace of the corresponding attack technique.

"Fingerprint spoof prevention would better be based on intrinsic errors in the spoof-creation process or on fingerprint features not present in latent prints (and become much harder to steal)," SRL added.

The iPhone 5s, on the other hand, was defeated by techniques widely published years ago.

The researhcers also identified vulnerability that could potentially give criminals time to break into the phones, gain complete control of data, access email accounts and then potentially take over the user's bank accounts.

In this video SRL demonstrated how other flaws in iOS and iCloud are exposed that ? when combined with Touch ID?s vulnerability to fingerprint spoofing ? allow for online identity theft.



Previous
Next
LCD TV Panel Shipments Dip in Q3 For The First Time        All News        New Acer and Gateway All-in-Ones Arrive Soon
Cisco, Google, SAP Considering Bids For BlackBerry: report     Mobiles News      Samsung Posts Record Earnings, HTC Under Pressure After Loss

Get RSS feed Easy Print E-Mail this Message

Related News
New iPads And OS X Yosemite Announcements Expected Next Month
Apple iOS 8 Coming On Wednesday
Apple Adds Two-step Verification To iCloud
Apple Lets You Remove U2 Gift Album From iTunes
Pre-orders for New iPhones Top Four Million in First 24 Hours
Apple Enjoys Huge Demand For New iPhone 6 Plus
Apple Unveils iPhone 6, iPhone 6 Plus, Apple Watch And Apple Pay
Gold iPhone 6 Appears Online
Apple Invites Fashion Editors To Press Event
Apple Supplier To Inverstigate Alleged Labor Rights Violations
Apple To Alert iCloud Users Over Security Issues
Apple's Smartwatch to Have NFC Technology, Come In Two Sizes: reports

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .