Hackers claim they thwarted iPhone’s Touch ID

Fingerprint authentication, a biometric security feature highlighted in the recently released iPhone 5S smart phone, is not secure and should be avoided as a device access method, according to the Germany-based Chaos Computer Club.

The group claimed in a blog post, that its members were able to bypass the authentication system. They also released a video showing how a latex copy of an iPhone 5S owner can be made and used to fool the biometrics-based authentication system on the smart phone.

“Apple had released a new iPhone with a fingerprint sensor that was supposedly much more secure that previous fingerprint technology,” A hacker nicknamed Starbug said. “In reality, Apple’s sensor has just a higher resolution compared to the sensors thus far. So we only needed to rump up the resolution of our fake (fingerprint).”

The method used by the hackers is in fact a tried and true trick which has been featured in many heist movies and TV shows. The video provided step-by-step instructions on how gathering mostly household materials to carry out the hack.

The hack involved:

  • Photographing the phone owner’s fingerprint at 1200 dpi
  • Cleaning up the image and printing it inverted at 1200 dpi onto a transparent sheet. A thick toner setting should be used
  • Pink latex milk or white wood glue is smeared onto the pattern created by the toner on the sheet
  • The latex layer is lifted from the sheet, breathed on to make it moist and placed on the iPhone’s fingerprint sensor to unlock the phone

The process may be a bit involved. However, it illustrates how fingerprints can be copied as people tend to leave them on almost everything they touch.

“We hope that this finally puts to rest the illusions people have about fingerprint biometrics,” said Frank Rieger, spokesperson for CCC. “It is plain stupid to use something that you can’t change and that you leave everywhere everyday as a security token.”

 

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Nestor E. Arellano
Nestor E. Arellano
Toronto-based journalist specializing in technology and business news. Blogs and tweets on the latest tech trends and gadgets.

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now