Google Glass Users Can Steal Your Passcode With a Glance

If that guy in the coffee shop wearing Google Glass looks suspicious, it's because he's stealing your PIN number.

Researchers at the University of Massachusetts Lowell found they could use video from wearables like Google Glass and the Samsung smartwatch to surreptitiously pick up four-digit PIN codes typed onto an iPad from almost 10 feet away—and from nearly 150 feet with a high-def camcorder. Their software, which used a custom-coded video recognition algorithm that tracks the shadows from finger taps, could spot the codes even when the video didn’t capture any images on the target devices’ displays.

Click to expand...

Takes longer than a glance to punch in your pin, it would take at least a gaze.

Some pretty smart research going on there don't you guys think? They figured out the as of yet unknown capabilities of video recording.

And I've seen some people scoff when I use my hand to physically cover the numpad with one of my hands. I also hold my card in a fist when not in the process of swiping it. Sometimes it's good to be paranoid. But I am usually handling cash nowadays unless it is a big-ticket item.

Armenius said:

And I've seen some people scoff when I use my hand to physically cover the numpad with one of my hands. I also hold my card in a fist when not in the process of swiping it. Sometimes it's good to be paranoid. But I am usually handling cash nowadays unless it is a big-ticket item.

Click to expand...

Same here, with everything being digital and having a camera these days you cannot be too careful. Besides, what advertise your card and other personal items to strangers anyway, right? Just like people who leave their phones, purses, etc, in plain sight in their cars are just increasing their changes of getting robed and have their windows busted. To me this is common sense 101...

I still think that booby traps should be allowed on cars, homes, etc.

So then whenever a stupid piece of human filth tries to steal your stuff, they get what's coming to them straight away.

cyclone3d said:

I still think that booby traps should be allowed on cars, homes, etc.

So then whenever a stupid piece of human filth tries to steal your stuff, they get what's coming to them straight away.

Click to expand...

And if the odd firefighter or paramedic or LEO gets killed or maimed, who cares? Not I, that's for sure.

My memory is easily capable of identifying a phone pin even when i cant see the persons screen, just by following the persons finger motions.

As such, I always add a few random false taps to my pin entry. Before, after, middle, whatever.

A whole ten feet away! Anything more than arms length gonna need that high def version.

Im really not a fan of google glasses, too many privacy issues with it.

Freebo said:

Im really not a fan of google glasses, too many privacy issues with it.

Click to expand...

What single privacy issue at all is there with google glasses that did not already exist with cell phones?

Their software, which used a custom-coded video recognition algorithm that tracks the shadows from finger taps, could spot the codes even when the video didn’t capture any images on the target devices’ displays.

Click to expand...

Considering how volatile shadows are, I call bull fucking shit.

rudy said:

What single privacy issue at all is there with google glasses that did not already exist with cell phones?

Click to expand...

The annoying sense of entitlement from the people who use them.

release this "custom-coded video recognition algorithm" to the wild and let the games begin!

Every article that gets put out there to warn people that Google Glass can record video seems more and more like an Apple paid advertisement. Largely it's because the warning is so stupid and lacks common sense.

The thing is I have recorded digital video on my phone (oh and also my tablet....and digital camera... oh and my laptop too) for years, . Basically if you walk into any Starbucks chances are there are enough devices to record every angle of your entry that I find it hard to believe that adding a camera to a pair of glasses (apparently Apple's wearable gear doesn't apply???) is somehow breaking a taboo.

Frankie said:

And if the odd firefighter or paramedic or LEO gets killed or maimed, who cares? Not I, that's for sure.

Click to expand...

You beat me to it.

God forbid they figure out low cost uncooled microbolometers + sensor fusion, to see the heat residue from the fingerprints and increase accuracy further.

All nothing new.

Sounds like without the custom software, Google Glass can't steal anything. Also sounds like the iPad could use privacy glass (or a cheap LCD).

The main thing is to be aware of the presence of any glassholes. If one's standing around an ATM, avoid using that ATM and notify any local security if possible. If you must use that ATM, take out your phone and be very obvious about taking pictures of their face before proceeding to the machine, or even better, start recording video and audio. When they ask what you're doing tell them it's for evidence in case they're using their glass to lift pin numbers. If they get annoyed at that, tell them that if they feel they have a "right" to record everything, then so do you. If they get belligerent, call the police and report them. Stay on the line with the dispatcher. If the glasshole leaves, you have a photographic or video evidence. If they do not leave then the police can deal with them when they arrive. The police will probably not react favorably to someone recording someone else trying to use the ATM. Just be sure you do not inadvertently record another customer that's using the ATM yourself.

If you're in a checkout line and a glasshole is hanging around, pay cash. If you don't have enough, ask the glasshole to remove the device while you're engaging in a private financial transaction. If he refuses, tell the clerk to summon a manager. Explain to the manager that you feel uncomfortable with someone recording your financial transaction and that you feel the glasshole is harassing you. Odds are the management will not be happy about someone recording another customer and will insist on the person either removing the device as requested or they'll be escorted out of the building.

Beyond that... if you're not sure a glasshole is around, swipe as credit card when paying for something. It's easier to recover a credit card than real bank funds.

If at an ATM, cover the keypad and make false number taps mixed in with the real ones without actually pressing the keys on the false taps, but making sure you're touching them. That should be enough to fool heat scanners and anything trying to pin down your finger motion.

There are times recording is appropriate, and times it's not. When it comes to ATM's and making payments in a place of business, it's 100% not appropriate for anyone except the business owner, the person engaging in the transaction with the business owner, or law enforcement to do any kind of recording.

Silly. You don't even need Google Glass to capture the pins.

Armenius said:

And I've seen some people scoff when I use my hand to physically cover the numpad with one of my hands. I also hold my card in a fist when not in the process of swiping it. Sometimes it's good to be paranoid. But I am usually handling cash nowadays unless it is a big-ticket item.

Click to expand...

I put my body really close to the device and use both hands to hold out my inside-out pants pockets to obscure the view when punching in my code. Better safe than sorry.

So someone is going to go to the trouble of taking a picture of your PIN, while somehow also getting your card number; put that onto a card blank then go to an ATM to withdraw? That's an awful lot of trouble for one card theft; not too worried about it.