Chaos Computer Club breaks Apple TouchID
1–10 of 458 posts
Re: Chaos Computer Club breaks Apple TouchID
#2Kind of a "well duh" post. All of the image scan finger print readers are easy to game.
Even the ones that use capacitance can be beaten with a rubber glove and a copy of the finger print, printed on the latex. (the best is actually an Vinyl condom that doesn't come pre-lubed, the ink sticks better and the vinyl is less of an insulator)
Re: Chaos Computer Club breaks Apple TouchID
#3The "How to fake fingerprints" link [1], is one of the scariest things I have seen, given how simple it is, and how much we reply on fingerprints for linking people to crimes.
BTW, for anyone who does not know about Chaos Computer Club (CCC) [2], they run a massive conference in EU. You can look at some of their talks @ http://media.ccc.de/
[1] http://dasalte.ccc.de/biometrie/fingerabdruck_kopieren?langu...
Re: Chaos Computer Club breaks Apple TouchID
#4iOS security is trivial to break if you have physical access to the device. TouchID (and passcodes) should be considered little more than a convenience, not a serious security measure.
Re: Chaos Computer Club breaks Apple TouchID
#5"Biometrics is fundamentally a technology designed for oppression and control, not for securing everyday device access."
Yes
Re: Chaos Computer Club breaks Apple TouchID
#6These findings would have been more surprising if the fingerprints were taken from the phone itself!
Re: Chaos Computer Club breaks Apple TouchID
#7Expected. Still much, much better security than no code at all. I will use it (with full knowledge of its downsides and tradeoffs) and it would behoove the CCC to not portray security as a binary state. (Just as much as it would behoove Apple to be truthful in their marketing.)
Don't use it if thieves would consider going through all the effort of faking out the scanner. That's what I take from this no doubt valuable and important work from the CCC.
(I assume that iPhone tracking and activation lock cannot be disabled with the fingerprint, so stolen phones will still be easily remotely wiped and bricked, with fingerprint or without. Thieves will have to be crafty and quick if the want to pull this off.)
Re: Chaos Computer Club breaks Apple TouchID
#8Nice , The mythbusters did this in their fingerprinter scanner episode ,
although they didn't have the iPhone5s but I am sure the same principle/technique would work.
Re: Chaos Computer Club breaks Apple TouchID
#9Wasn't Gruber getting awfully excited about how amazing and revolutionary Apple's finger print sensor was?
Will he be claim chowdering?
Re: Chaos Computer Club breaks Apple TouchID
#10Wasn't Gruber getting awfully excited about how amazing and revolutionary Apple's finger print sensor was? Will he be claim chowdering?
What did he claim?