8 ms·
Bruteprint attack can cheaply unlock various fingerprint-secured phones
- piyush_soni 3y agoWell, at least it was some hours on near-latest phones with specialized hardware and software (latest and Pixel phones are missing from the study for some reason). Looks much safer compared to Apple's FaceID which was unlocked under 120 seconds with no special hardware attached to the phone (reported by the same Security Lab Tencent): https://www.forbes.com/sites/daveywinder/2019/08/10/apples-iphone-faceid-hacked-in-less-than-120-seconds/?sh=628c9dea21bc https://www.forbes.com/sites/daveywinder/2019/08/10/apples-i...
- sillywalk 3y agoLooks like the exploit requires physically opening the phone and attaching a cable to the phone motherboard/fingerprint reader chip.
- ashton314 3y agoI think the fact that some phones (read: iPhones) are resistant to this is pretty awesome. It is comforting to know that this isn’t a remote exploit of course, but if my son were to cat lost, I wouldn’t want the threat of an actor getting access to my phones contacts to exist.
- stubish 3y agoI'd always assumed it would be easier to lift a fingerprint from the many on my case and screen, unlocking in a single attempt.
- Tagbert 3y agoat least for iPhone, a fingerprint alone is not enough. it has to "look like a finger" to the sensor.
- ajolly 3y agoOriginal paper here - https://arxiv.org/pdf/2305.10791.pdf https://arxiv.org/pdf/2305.10791.pdf