P******d
发帖数: 4272 | 1 。。。。。。
iPhone 5 TouchID broken by Chaos Computer Club
Sticky fingers point to ancient hack giving Apple a five-finger discount
By Richard Chirgwin, 22nd September 2013
6
RELATED STORIES
Teardown Deep inside the iPhone 5s lurk a few surprises
PEAK APP: After 2013, you'll NEVER again install as many – Gartner
Something for the Weekend, Sir? WHY do phone cams turn me into a clumsy twat
with dexterity of an elephant?
First look: Apple iPhone 5S and 5C
Video Fanbois shun 'crappy plastic' iPhone 5C
print alert share icon
MORE READING
Apple
Fingerprint Scanner
Chaos Computer Club
Iphone 5
Touchid
Free ESG report : Seamless data management with Avere FXT
Well, that lasted a long time: the Chaos Computer Club has already broken
Apple's TouchID fingerprint lock, and warns owners against using biometric
ID to protect their data.
As the group explains here, it seems that the main advance in Cupertino's
biometrics was that it uses a high resolution fingerprint scan. The post
states:
A lot of bogus speculation about the marvels of the new technology and how
hard to defeat it supposedly is had dominated the international technology
press for days.
"In reality, Apple's sensor has just a higher resolution compared to the
sensors so far. So we only needed to ramp up the resolution of our fake",
said the hacker with the nickname Starbug, who performed the critical
experiments that led to the successful circumvention of the fingerprint
locking.
All the CCC needed to defeat the scanner was an image of a user's
fingerprint at 2,400 dpi resolution. That scan was “cleaned up”, inverted,
and printed into a transparent sheet. The image of the print is then lifted
from the sheet using latex milk or woodglue.
“After it cures, the thin latex sheet is lifted from the sheet, breathed on
to make it a tiny bit moist and then placed onto the sensor to unlock the
phone,” the post states, adding that this technique can be used against “
the vast majority” of fingerprint scanners.
At the time of writing, the CCC hadn't announced whether it will claim any
of the prizes on offer for a successful attack.
The video below demonstrates the attack. ®
Free ESG report : Seamless data management with Avere FXT | c**********g
发帖数: 1607 | 2 不会吧。听说都可以用乳头或者菊花当密码。唉，本来以为可以作为cell phone
commerce的基
石。就是以后信用卡公司关门了，大家都用apple的手机当信用卡了。我还准备倾家荡
产，抵押了美国的房子车子和裤子去进aapl的。看样子不行啊。。。 |
|
