3 ms·

Apple claims that "The technology within Touch ID is some of the most advanced hardware and software we've put in any device." [1]. This attack showed that inc

Apple claims that "The technology within Touch ID is some of the most advanced hardware and software we've put in any device." [1]. This attack showed that increasing sensor resolution only requires increasing the resolution on the fake print to match. This attack is an interesting data point in the debate over using biometrics in access control systems. Apple was hyped to have introduced something new and exciting in this space, but it's quickly been shown to not be a significant advance in fingerprint sensor technology. Touch ID, however, is still an adequately secure access control check to be useful to consumers. [1]http://support.apple.com/kb/HT5949?viewlocale=en_US http://support.apple.com/kb/HT5949?viewlocale=en_US

fastball 13y ago
Well, since they've never put a fingerprint authentication system in their hardware, I think that their claim still holds...
chucknelson 13y ago
> This attack showed that increasing sensor resolution only requires increasing the resolution on the fake print to match. Just to clarify, it wasn't just the increased resolution that was required here, but "latex milk", I assume to simulate a living finger, as well. It's not as simple as print-of-print = unlock.
- exodust 13y ago
  It's "latex milk" today, tomorrow it might be just "regular milk" that's needed! The point is that the fingerprint security was bypassed so soon after release, and posted on the internet. Sure, it takes a lot of effort with the first generation of this hack. No matter how cool the fingerprint tech is on iPhones, you wouldn't go as far as using it for your master access to your password manager app or bank account app. For the purpose of replacing the lock screen pin, or as others have said, no pin at all, I think it's fine.
- wiml 13y ago
  Latex milk, white glue, grocery-store gelatin— they all work. You just need something thin and flexible that'll take an impression.

fastball 13y ago

Well, since they've never put a fingerprint authentication system in their hardware, I think that their claim still holds...

chucknelson 13y ago

> This attack showed that increasing sensor resolution only requires increasing the resolution on the fake print to match. Just to clarify, it wasn't just the increased resolution that was required here, but "latex milk", I assume to simulate a living finger, as well. It's not as simple as print-of-print = unlock.

exodust 13y ago
It's "latex milk" today, tomorrow it might be just "regular milk" that's needed! The point is that the fingerprint security was bypassed so soon after release, and posted on the internet. Sure, it takes a lot of effort with the first generation of this hack. No matter how cool the fingerprint tech is on iPhones, you wouldn't go as far as using it for your master access to your password manager app or bank account app. For the purpose of replacing the lock screen pin, or as others have said, no pin at all, I think it's fine.
wiml 13y ago
Latex milk, white glue, grocery-store gelatin— they all work. You just need something thin and flexible that'll take an impression.