5 ms·
That Fingerprint Sensor on Your Phone Is Not as Safe as You Think
- pseingatl 10y agoKeep in mind also that the giving of fingerprints is considered non-testimonial. You can be forced to give up your fingerprints, but in a criminal prosecution you cannot be forced to answer questions such as, "what is your password?" The heightened security thought to be obtained by cloaking a phone with a fingerprint is thus easily removed.
- askvictor 10y agoI hope that soon a 'duress fingerprint' option is implemented; the simplest way is that you enroll one finger to be your duress finger. When you scan that one, the phone will require a password to unlock it (even if rebooted)
- idlewords 10y ago"Please extend your right index finger" Cop presses your finger to phone.
- PhantomGremlin 10y agoSigh. I clicked, hoping to learn something. But in the fourth paragraph I read: The researchers did not test their approach with real phones That's when I stopped. What, nobody at NYU or Michigan State could afford to buy some "real phones" to check out their theories??? What fucking bullshit!!!
- apetresc 10y agoYeah, exactly. "Did not test with real phones" is journalist code for "does not actually work in reality, but why throw away a perfectly good headline?"
- Neliquat 10y ago1. Fingerprint scanners have always had security issues. 2. They replicated nothing. 3. Why nyt?
- jefhwite 10y agoI think the Master Print technique is an novel approach to biometric cracking — closer to the statistical techniques used to defeat passwords, right?
- zichy 10y agoYes, we know. [1][2] -- [1]: https://media.ccc.de/v/31c3_-_6450_-_de_-_saal_1_-_201412272030_-_ich_sehe_also_bin_ich_du_-_starbug https://media.ccc.de/v/31c3_-_6450_-_de_-_saal_1_-_201412272... (German) [2]: https://media.ccc.de/v/dg49-biometrie https://media.ccc.de/v/dg49-biometrie (German)
- slededit 10y agoHonestly, if it weren't for the finger print sensor I'd still be passwordless. I can't imagine I'm alone on that.