4 ms·
Numeric pin? Seems like fingerprints on the glass alone would make a shorter numeric pin trivial to crack. I'm just thinking of all the other weak security sys
by JKCalhoun 2y ago
Numeric pin? Seems like fingerprints on the glass alone would make a shorter numeric pin trivial to crack.
I'm just thinking of all the other weak security systems like garage door keypads where the code is derived from the more worn buttons. Or cleaning/dusting an ATM keypad before someone enters their code and then carefully examining the buttons afterwards.
But who knows — perhaps people have completely munged up their displays making fingerprinting useless.
- byproxy 2y agoThere are some touchscreen input systems that will randomize the configuration of the numbers displayed to mitigate the "finger smudge" attack.
- mc32 2y agoMan that would suck. I rely on muscle memory to recall passwords in everyday usage. Of course I could open a PWD manager elsewhere but it becomes cumbersome.
- sebastiennight 2y agoYou would be surprised. After a couple days only, my brain adapted to the random layout well enough that it's the regular layout (on my iPhone, which doesn't seem to have the randomization ability) that throws me for a loop.
- askonomm 2y agoWould the ATM thing actually work though? Afaik most European ATM banks issue 4 digit pin codes and will block and eat the card at 3 invalid tries. Not sure how many tries you have total, but I figure it's not that easy to guess it right. Update: ChatGPT says 12 tries total to get it right, so that makes it ~10% success ratio?
- JKCalhoun 2y agoI probably read about this technique in Phrack or something similar .... so that kind of dates it.
- askonomm 2y agoYeah it could be very well possible that it wasn't limited to just 3 tries back then, or at the very least the ATM would not block and eat the card then, allowing you to try again or at a different machine.