Saturday, August 02, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
French Carrier Iliad To Bid For T-Mobile
Google's Ambitious Secret Barge Project Was Scarped
Chinese Smartphones Boost Sharp's 1Q Operating Profit
HP's Luxury Smartwatch Coming This Fall
Tessera and Micron Execute New Technology and Patent License Agreements
Sony Releases The AS20 Action Cam, New Cyber-shots
Microsoft Releases New Limited Edition Wireless Mobile Mouse 3500 With Master Chief from Halo
Researchers Discover New Smartphone Flaws
Active Discussions
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
Video editing software.
 Home > News > Mobiles > Securit...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, October 04, 2013
Security Firm Hacks iPhone Fingerprint Scanner


A German security company has figured out an easy way to crack the fingerprint scanner of the new iPhone 5S.

Berlin's Security Research Labs (SRL) published a video demonstrating the newly discovered flaw.

SRL, which has also disclosed a major security flaw in SIM card technology that affected mobile systems around the globe, said it has shared its research with Apple's security team.

According to SRL, using fingerprints as credentials for local user authentication has two shortcomings when compared to passwords. Once a fingerprint gets stolen, there is no way to change it. To offset this high compromise penalty, fingerprints would need to be very hard to steal. However, users leave copies of their fingerprints everywhere; including on the devices they protect. Fingerprints are not fit for secure local user authentication as long as spoofs ("fake fingers") can be produced from these pervasive copies.

"The iPhone 5s?s fingerprint sensor does not only appear to provide no additional protection, its use even undermines other security mechanisms," SRL said.

The iPhone 5s has moved slightly beyond the capabilities of earlier touch sensors: It provides a higher resolution image of the users' fingerpints and according SRL, it uses this higher resolution to match based on finer structures. However, SRL claims that even these finer structures can be spoofed, for example based on an equally high resolution smartphone camera image, showing that some defense strategies only improve at the pace of the corresponding attack technique.

"Fingerprint spoof prevention would better be based on intrinsic errors in the spoof-creation process or on fingerprint features not present in latent prints (and become much harder to steal)," SRL added.

The iPhone 5s, on the other hand, was defeated by techniques widely published years ago.

The researhcers also identified vulnerability that could potentially give criminals time to break into the phones, gain complete control of data, access email accounts and then potentially take over the user's bank accounts.

In this video SRL demonstrated how other flaws in iOS and iCloud are exposed that ? when combined with Touch ID?s vulnerability to fingerprint spoofing ? allow for online identity theft.



Previous
Next
LCD TV Panel Shipments Dip in Q3 For The First Time        All News        New Acer and Gateway All-in-Ones Arrive Soon
Cisco, Google, SAP Considering Bids For BlackBerry: report     Mobiles News      Samsung Posts Record Earnings, HTC Under Pressure After Loss

Get RSS feed Easy Print E-Mail this Message

Related News
Next Apple TV Release Delayed
Apple May lay Off People at Beats: report
Samsung And Apple See Their Smartphone Market Shares Plunging
Apple's MacBook Pros Now Come With Faster processors And More Memory
Apple-Beats Deal Cleared By Europe
Swatch Denies Working with Apple on iWatch
Apple OS X Yosemite Bets Coming on Thursday
Apple Says There Are No Backdoors In iOS
Apple's Revenue Boosted By China Growth
Apple Granted Patent for Smartwatch
iTunes Festival Returns to London
Europe Says Apple Should Do More To Protect Users From In-app Purchases Problem

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .