3 ms·
Researchers Used Sonar Signal from Smartphone Speaker to Steal Unlock Passwords
- elsombrero 8y agoLink to the original paper https://arxiv.org/abs/1808.10250 https://arxiv.org/abs/1808.10250
- gnur 8y ago> “We expect iPhones are similarly vulnerable, but we only tested our attack on Androids,” Peng Cheng, a doctoral student at Lancaster University told me in an email. Well, of course not. First of all, iPhones don't have unlock patterns. Which greatly diminishes the usefulness of this approach. Also, I don't believe iOS would allow continuous use of microphone and speaker when the screen is off. And it is incredibly hard to sideload applications on unsuspecting users.
- gruez 8y ago>Also, I don't believe iOS would allow continuous use of microphone and speaker when the screen is off not to mention there's going to be an obvious red recording banner when your screen is on to do the unlock.
- jrockway 8y agoI make phone calls from time to time with my iPhone. The screen is off but the microphone and speaker are enabled.
- ausbah 8y ago>There are nearly 400,000 possible unlock patterns on the 3x3 swipe grid on Android phones, but prior research has demonstrated that 20 percent of people use one of 12 common patterns. While testing SonarSnoop, the researchers only focused on these dozen unlock combinations. It seems to me that the effectiveness of this exploit comes more from the poor passwords most people use than any truly “earth shattering” security flaw in the technology.
- teilo 8y agoFar easier is to just look at the smudge patterns on the screen.
- have_faith 8y agoOr to just record someone putting their code in from afar.
- jpalomaki 8y agoI wonder if you could use the accelometers for something similar? Made some practise runs with my iPhone and at least with this screen size the phone is moving when I try to mimick the unlock patterns with thumb.