• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Apple Touch ID Attack Explained On Video

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
The guy that cracked Apple's Touch ID fingerprint scanner has made a video of the entire process. Pretty sad that it took a matter of hours for someone to come up with this.
 
So you basically do a shit ton of work that you see done in every fucking movie ever made to fool a fingerprint scanner and shockingly enough the iPhone is fooled... or as they say "hacked"
 
Well, if you have someone's finger, you can break it until they tell you a passcode as well.
 
Steve said:
The guy that cracked Apple's Touch ID fingerprint scanner has made a video of the entire process. Pretty sad that it took a matter of hours for someone to come up with this.
Click to expand...

really? did you watch the video? lol headline made it seem like a lot easier than it was....
 
I can already see iPhone 6 presentation day: "Introducing the all-new iPhone 6. We care about your privacy, and so, we adressed a flaw in our previous security models. The all-new iPhone 6 comes now with the usual finger print reader, but now also equipped with a very small needle on the homescreen button, that will quickly and painlessly take a sample of your blood to confirm your identity."
 
BlackLionPT said:
I can already see iPhone 6 presentation day: "Introducing the all-new iPhone 6. We care about your privacy, and so, we adressed a flaw in our previous security models. The all-new iPhone 6 comes now with the usual finger print reader, but now also equipped with a very small needle on the homescreen button, that will quickly and painlessly take a sample of your blood to confirm your identity."
Click to expand...

why stop there, just have it scrape a tiny piece of the skin off your finger and do a DNA test instantaneously...

also release API for it so we can make apps to prove i ain't the babydaddy...
 
Agreed would be more impressed if a scanned print mirrored then printed was able to crack it the extra steps they took would beat all but the most robust finger print scanner. An easy fix is put a temperature sensor there as an additional check if the object touching is out of range for your normal heat then reject the print give the phone ambiant temp sensor and a sensor in the print scanner adjust for ambient and it should be fairly accurate they would then have to get the fake to match the temp expected too.
 
Seems very secure to me.

Any monkey can go to a hardware store, buy a large hammer and steal everything in your house and car.

But since it's Apple it's cool to act like everything they do is wrong.
 
Also if they stole the phone I expect the first thing they do if it is locked is plug it into I tunes and restore erasing the owners info lock ect and then use it as a phone till the phone gets blacklisted or sell it before that happens for a quick buck.

More often they will flip it the same day they steal it.
 
Lunas said:
Also if they stole the phone I expect the first thing they do if it is locked is plug it into I tunes and restore erasing the owners info lock ect and then use it as a phone till the phone gets blacklisted or sell it before that happens for a quick buck.

More often they will flip it the same day they steal it.
Click to expand...


Can't even do this anymore now that iOS 7 has the activation lock. Phone won't get past the activation step that it goes through after a fresh restore unless you have the proper iCloud password of who the phone belongs to.
 
sfsuphysics said:
So you basically do a shit ton of work that you see done in every fucking movie ever made to fool a fingerprint scanner and shockingly enough the iPhone is fooled... or as they say "hacked"
Click to expand...

Yes provided the target has also placed a single clear fingerprint on a nice clean phone to assist you.
 
Mchart said:
Can't even do this anymore now that iOS 7 has the activation lock. Phone won't get past the activation step that it goes through after a fresh restore unless you have the proper iCloud password of who the phone belongs to.
Click to expand...

yup.

When I 'upgraded' from iOS7 beta to iOS7 GM, it made me enter my itunes information before it would allow the phone to be used (even after a clean restore). Makes stolen iDevices pretty much useless to thieves... wouldn't even really be useful for parts since new 3rd party are usually very cheap.
 
Shame it won't really lower the theft rates of iPhones at all since most of the thieves are mentally inept and will still steal the damn things only to realize it's a worthless brick.
 
Mchart said:
Shame it won't really lower the theft rates of iPhones at all since most of the thieves are mentally inept and will still steal the damn things only to realize it's a worthless brick.
Click to expand...

Lesson.. Mentally inept thieves are probably smarter then lots of people.
 
goodcooper said:
really? did you watch the video? lol headline made it seem like a lot easier than it was....
Click to expand...

Yeah, I was up to the point where they inverted the print on the screen and I assumed they'd somehow hold the phone up the screen to fool it....

then they printed a copy of the print out and I thought they'd push their finger on top of the print and fool it...

then they put the copy on a PCB and used UV lithography to transfer the image to that... and I had no fucking clue what they were doing... chemical bath... spray with graphine... put glue on it... peel of glue... put on finger.. then do it.

Made me think see greasy ass finger print, put on latex glove, spray finger tip with some adhesive, press against finger print, use gloved finger on iPhone could have worked just as well.
 
I think passwords are better security if you have a good one. The court has already ruled you cannot be compelled to give your password. You can however be compelled to give blood samples and probably unlock your phone with your fingerprint. The difference is that these methods are not constitutionally protected under the 5th amendment (they can't force you to tell them something basically, but they can take your DNA sample etc)

Also, I dunno how the IPhone finger reader works, but I have seen an easier hack to fingerprint scanners. I believe they lifted a print/scanned it, printed it on a laser printer to create ridges from the toner, then used elmer's glue to create a finger print.

Last, the method they used was a bit intensive, but really not complicated.

1. Scan the finger print.
2. Touch up the contrast in photo editor
3. print it on trace paper
4. use acid / UV light to etch on PCB
5. spray graphite on the pcb (it's conductive, I'm assuming this is the reason for it for the fingerprint reader)
6. Smear glue on it to create the fake finger and let dry
7. Peel it off and use it
 
sfsuphysics said:
Yeah, I was up to the point where they inverted the print on the screen and I assumed they'd somehow hold the phone up the screen to fool it....

then they printed a copy of the print out and I thought they'd push their finger on top of the print and fool it...

then they put the copy on a PCB and used UV lithography to transfer the image to that... and I had no fucking clue what they were doing... chemical bath... spray with graphine... put glue on it... peel of glue... put on finger.. then do it.

Made me think see greasy ass finger print, put on latex glove, spray finger tip with some adhesive, press against finger print, use gloved finger on iPhone could have worked just as well.
Click to expand...
They did circuit board craft they used the UV to transfer the stop it the copper coated fiberglass substrate then soaked it in nitric acid all of which is available at your local radio shack I would say it only costs 20-30 for what is needed for the extra steps. But looking at my screen my phone does not have any thing more than a smudged finger tip nothing like the clear thumb print they pulled off a clean screen.
 
Not to mention after 5 failed attempts or however many hours the user has set in iOS 7 the phone will ask for the unlock passcode even once you get past the fingerprint scanner.

Again, the entire discussion is irrelevant.
 
Yes, but it's crap IMO.

What they did I personally wouldn't call 'hacking'. Further, it requires a perfect set of circumstances.
 
Or, cut the person's finger off you stoled the phone from... or is that too extreme ?
 
it's just convenient not more secure. not sure why people think otherwise
 
It's been a long time since apple did something innovative, so I'm glad to see the fingerprint scanner. It works good enough for most people. So far it takes so long to beat it that the phone would be remotely wiped before the thief could do anything with it.

Codes and pattern locks are much easier to beat using the low-tech method of "observance and surveillance".

Matthew Honan is a good example of how weak links elsewhere in your security chain can have catastrophic results.
 
You must log in or register to reply here.
Back
Top