Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fingerprints can be hacked

blog.kraken.com

Post reply on HN
Print view View original

311–320 of 333 posts

Re: Fingerprints can be hacked

#311

Post by ClumsyPilot »

Aengeuad wrote: post #174
y4mi wrote: post #43

Earlier quoted context omitted.

You can unlock most home doors within seconds even without having the key Nonetheless, we still lock our doors and thieves often break in, even though picking the lock is both safer and less likely to arouse suspicion. Your argument makes sense, but we humans aren't really rational

There's a good reason why criminals don't carry lockpicks around and that's because they're regulated, in much of the world mere possession of them outside of your residence is a criminal offence and even in places where you can carry them legally they not only show prior intent, their use in criminal activities carries a charge just like breaking and entering. I'd also argue that being stuck picking a stubborn lock…

Lockpicks are not illegal or regulated in UK, you just have to learn how to use them

Re: Fingerprints can be hacked

#312

Post by jschwartzi »

twobitshifter wrote: post #145
nanidin wrote: post #91

Earlier quoted context omitted.

> State driver license in USA In which states? The only thing I have been fingerprinted for is in the US is The Global Entry program.

State law enforcement fingerprinted me as a child around 11 years old.

In my state prospective teachers are fingerprinted and their prints are run through the FBI database when applying for the certification. My prints are in that database.

Re: Fingerprints can be hacked

#313

Post by jschwartzi »

imwillofficial wrote: post #245
DennisP wrote: post #196

Earlier quoted context omitted.

> definitely a thumb idea Four hours have gone by without comment on this and I feel the offense should be recognized.

I thought it was intentional, won’t lie, I laughed.

I can’t put my finger on why though.

Re: Fingerprints can be hacked

#315

Post by makecheck »

A fingerprint is a user ID that is usually treated like a password, which is the main problem here.

They should add at least a 2nd layer (that doesn’t reduce the convenience too much).

For example, people could probably remember a simple Morse-code-like sequence of finger presses, e.g. your extra token is that you set it up to use “tap, tap, longpress, longpress, tap”.

Re: Fingerprints can be hacked

#316

Post by babypuncher »

raxxorrax wrote: post #307
babypuncher wrote: post #218

Earlier quoted context omitted.

My problem with this reasoning is that it leads people to think that biometrics therefore shouldn't be used. Can biometrics be spoofed? Absolutely. Is it likely to happen to the average person? Not at all. For a typical everyday user, a fingerprint or face scan is probably more secure than the common alternatives of "sticky note" passwords, easily guessed PINs, or no authentication at all. Biometrics are a compromise…

A gesture unlock will provide the same and does not need a biological marker. I believe biometrics aren't necessary to establish security and in the worst case reveal unnecessary information.

Reveal unnecessary information to whom? Both Windows Hello and iOS TouchID/FaceID never allow biometric data to leave the device. In the case of iOS, that data never even leaves the secure enclave.

Re: Fingerprints can be hacked

#317

Post by breser »

kurthr wrote: post #267
Elidrake24 wrote: post #264

Earlier quoted context omitted.

Just hit the power button 5 times on my iPhone 13 Pro, and it locked down FaceID as I'd expect (while bringing up the Reset/Power Off screen). You've described an alternative method, not the only.

Which OS are you updated to (no please don't post it)? not 15.1.x? Have you disabled wallet, Siri, and SOS? It doesn't work on any of the 5x 12s and 13s (pro and not) I just tried. It did work on an 11, which was not updated to 15. You also risk the accidental activation of an SOS call.

I think you need to turn on the power button clicking 5 times feature by turning on the "Call with Side Button" option in Settings under Emergency SOS. I'd also suggest turning off Auto Call if you want to use it like this.

Yes this is kinda buried and not clear at all that this function also disables FaceID but it does.

Re: Fingerprints can be hacked

#318

Post by breser »

PhantomGremlin wrote: post #273
kurthr wrote: post #213

Earlier quoted context omitted.

On modern FaceID phones you need to hold the power and down volume key to bring up the Reset/PowerOff and cancel. Just clicking multiple times will bring up wallet, siri, or do nothing.

Just clicking multiple times will bring up wallet, siri, or do nothing. On my iPhone 13, just now, I rapidly clicked the power button 5x. The phone immediately made a loud sound and put up a screen that said "Emergency SOS". There was an option to "cancel" it, but I assume that the phone would have contacted 911 in short order unless I quickly cancelled. So the correct description is probably "it depends".

There is an option in the settings to make it not actually call unless you press a further UI button on the iPhone.

In Settings go to Emergency SOS. Uncheck Auto Call

Re: Fingerprints can be hacked

#319

Post by Engineering-MD »

occamrazor wrote: post #305
a_imho wrote: post #304

Earlier quoted context omitted.

So why not just use a username instead?

It‘s unique (unlike short alphabetic identifiers often used as usernames) and hard to forget (unlike UUID-like user ids).

*probably unique, but not possible to prove definitely unique.

Re: Fingerprints can be hacked

#320

Post by [deleted] »

ARandomerDude wrote: post #74
Cd00d wrote: post #64

Earlier quoted context omitted.

I don't understand this one - when are people taking a selfie at the same time they're typing in their pin? I have an android phone, and I don't even unlock to take pictures. I just don't follow the timeline and geometry. Seems theoretical only maybe.

It's badly worded in the article but I think it means person A is entering his pin. Persons B, C, D, etc. take selfies in the vicinity of person A. By comparing multiple selfies from sightly different times, you can determine person A's pin.

[deleted]
Post reply on HN