AI-driven thermal cameras used to obtain passwords

#1

Post by elnr » Tue, Oct 11, 2022, 8:02 AM UTC

AI-driven thermal cameras used to obtain passwords
gla.ac.uk

Re: AI-driven thermal cameras used to obtain passwords

#2

Post by amelius » Tue, Oct 11, 2022, 9:27 AM UTC

Fortunately most people stay at the machine after typing their password.

Anyway perhaps now is a good time to get some 2fa hardware token.

Re: AI-driven thermal cameras used to obtain passwords

#3

Post by jbj » Tue, Oct 11, 2022, 9:31 AM UTC

amelius wrote: post #2

Fortunately most people stay at the machine after typing their password. Anyway perhaps now is a good time to get some 2fa hardware token.

not if that machine is an ATM

Re: AI-driven thermal cameras used to obtain passwords

#4

Post by codetiger » Tue, Oct 11, 2022, 9:32 AM UTC

jbj wrote: post #3

amelius wrote: post #2

Fortunately most people stay at the machine after typing their password. Anyway perhaps now is a good time to get some 2fa hardware token.

not if that machine is an ATM

So in case of ATMs we now need to make sure we soft touch some random buttons to ensure this trick doesn't work.

Re: AI-driven thermal cameras used to obtain passwords

#5

Post by drath » Tue, Oct 11, 2022, 9:55 AM UTC

codetiger wrote: post #4

jbj wrote: post #3

Earlier quoted context omitted.

not if that machine is an ATM

So in case of ATMs we now need to make sure we soft touch some random buttons to ensure this trick doesn't work.

Also, to mitigate the problem somewhat, one could obfuscate the order at which the numbers were pressed by setting a custom pin with repeating numbers. Ideally, just repeating one./s

Re: AI-driven thermal cameras used to obtain passwords

#6

Post by SanjayMehta » Tue, Oct 11, 2022, 9:59 AM UTC

This is just silly: how many people punch in their PIN number and then leave immediately?

I guess these researchers haven't ever withdrawn money from an ATM.

Re: AI-driven thermal cameras used to obtain passwords

#7

Post by yetanotherloser » Tue, Oct 11, 2022, 10:01 AM UTC

Someone's been playing Splinter Cell!

Re: AI-driven thermal cameras used to obtain passwords

#8

Post by amelius » Tue, Oct 11, 2022, 10:01 AM UTC

jbj wrote: post #3

amelius wrote: post #2

Fortunately most people stay at the machine after typing their password. Anyway perhaps now is a good time to get some 2fa hardware token.

not if that machine is an ATM

With an ATM you are already using a hardware token ;)

Re: AI-driven thermal cameras used to obtain passwords

#9

Post by nonrandomstring » Tue, Oct 11, 2022, 10:08 AM UTC

People in urban public spaces are already entering passwords to phones, tablets and laptops within full view of cameras that can see the dirt under their fingernails.

Re: AI-driven thermal cameras used to obtain passwords

#10

Post by cricalix » Tue, Oct 11, 2022, 10:13 AM UTC

amelius wrote: post #2

Fortunately most people stay at the machine after typing their password. Anyway perhaps now is a good time to get some 2fa hardware token.

There are ATMs in Europe that will take the card, ask for what you want to do, ask the amount if it’s a withdrawal, and then ask for the PIN and dispense it. This reduces the time between typing and dispensing. No idea if it’s a significant enough reduction in the time versus card, pin, navigate to withdraw, dispense such that it would enable this attack.