Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Replicate what? Motorola Atrix? Because that's exactly what Apple replicated. They tried to fool people into thinking that they did something more than the conventional fingerprint scanner but this experiment exposed their lies.

And FYI, there were reports in the news that Samsung was preparing fingerprint scanner too (people found some relevant APIs)

Except that the sensor in the Atrix didn't work very well. As for Samsung, they can say they're working on whatever they want to, but until we see it, Apple's ahead of them there. They acquired Authentic, so Samsung would have to use a different method not infringing on any patents they used.
 
Even if this is legit it still wouldn't keep me from using it. You are much more likely to have your credit card number stolen than have someone take a 1200 dpi photo of your print to hack into your phone. I don't think apple ever claimed it was full proof. That's why they make you enter a passcode as a back up.
 
So a 2400 DPI photograph of the fingerprint is required? I wouldn't call that 'bypassing'.

This just in, every single passcode system bypassed by first acquiring user's passcode.

+1

If someone gets a 2400 dpi photo of my finger, I've got bigger issues then them getting into my iPhone ;)
 
Not to mention that a simple 4 digit passcode can be guessed within 28 "work-hours", if you can try 1 combination in every 10 seconds (that's not a hard quest). If we take the average 8 working hours, your top secret passcode can be guessed in less then 4 days. Are you frightened now?

I'm terrified. I don't know how to cope! :D
 
Exactly.

Also... you can make a copy of my house key and get into my house.

Nothing is secure!

The whole point of this Touch ID was that it would increase security. If it really has been hacked by a fairly common technique then this is certainly a failure on Apple's part and damages their image.
 
Show me the video where they use a different person's finger instead of the same one who has his fingerprint already on the phone to unlock it. I think the sensor is reading through the latex image and reading his original print. ;)

No, every finger has different prints. Using a different finger on the same hand is as different as using a different finger on a different person's hand. Why else do you think you have to register each finger individually?

Honestly, people these days lack even basic knowledge of the topic they talk about...
 
Not to mention that a simple 4 digit passcode can be guessed within 28 "work-hours", if you can try 1 combination in every 10 seconds (that's not a hard quest). If we take the average 8 working hours, your top secret passcode can be guessed in less then 4 days. Are you frightened now?

That's actually not true.

For each incorrect guess iOS makes you wait longer to input the next guess. It's effectively impossible to brute force.

But yeah, this is kind of silly. If I took a photo of your house keys I could also manufacture a copy and then break in. But how often does this actually happen?
 
The sensor should included something that detects a human pulse.
My dear, what you do think was the purpose of putting that thin sheet containing the fingerprint fake on somebody's finger? Maybe because that way it acts more like a real finger, well because it is a real finger, just with a thin layer on the finger.

Boy Apple is on a roll.
2) Finger ID easily thwarted
Tech press and internet trolls learn that fingerprints can be faked. Thanks to Apple for furthering their education. Much like Apple showed the world that glass can shatter when dropped onto a hard surface. What all wouldn't we know if Apple hadn't incentivised the tech press and internet trolls to try it out.
 
I'm not too surprised it was hacked, but a bit surprise it took only 2 days. This is going to get a lot of press, and I'm guessing it will scare companies away from allowing the Touch ID to be used instead of a password. It might also set back Touch ID's rollout as a payment mechanism outside the App Store and iTunes. After all, a hacker might be able to pull a workable fingerprint from the button itself.

Even if this is true, all you have to do is turn off the fingerprint authentication and your back to the same old password thing that every other phone uses.
So this is really nothing at all. You can be sure the press will have a feeding frenzy with it though. Vultures that they are.
 
Yawwwn!

[url=http://cdn.macrumors.com/im/macrumorsthreadlogodarkd.png]Image[/url]


The Chaos Computer Club claims to be able to bypass Apple's new Touch ID fingerprint sensor with a photo of the original user's fingerprint. The bypass is demonstrated in this short video:

YouTube: video
The system is detailed in a how to which requires obtaining the original user's fingerprint:Apple's new iPhone 5s includes a fingerprint sensor called TouchID, which can be used to unlock the iPhone as well as make purchases on the Apple iTunes store. Users, however, can continue to use a pin or password as an alternative to the fingerprint sensor -- though that is arguably even less secure than duplicating someone's fingerprint.

Article Link: Chaos Computer Club Bypasses Apple's Touch ID System (with copy of original fingerprint)

Big deal. If you're going to go to that much trouble, you may as well rob a bank
 
Show me the video where they use a different person's finger instead of the same one who has his fingerprint already on the phone to unlock it. I think the sensor is reading through the latex image and reading his original print. ;)

Have you ever looked at your fingers? They all have different prints.

Or do you think the sensor read through the fake fingerprint, through his middle finger, though his hand, to the attached index finger, and read that print?
 
Touch ID is still a lot better than a 4 digit passcode and a Million times better than no passcode.

No one with who has a life is going to use type complex passwords into their phones everytime they want to unlock.

Actually, if we're talking about theoretical possibilities someone can also point a long zoom lens camera on you while you type your password and get it that way.
 
Living Tissue Not Required!

As I noted earlier in a different thread, an RF sensor isn't dependent upon the skin being alive.

I can confirm this, I trained my 5s using my living thumb tissue. Then I cut off my thumb and tried unlocking my phone with it and it TOTALLY WORKED.

As a side note, the phone app went a little squirrelly when I was trying to dial 911 with blood all over the screen, but it eventually worked too!
 
I don't get it.

Isn't it just easier to use a PIN-punching robot instead of messing with fingerprints??? :confused:

Not if you have time constraints, or a limited number of attempts before a wipe.
 
My thoughts exactly. I would have been 'convinced' if a DIFFERENT person then lifted that piece of paper and used that to circumvent the lock.

Furthermore, how do we know the phone was locked? It could simply have been that he pressed the button to unlock it.

How do we know the New York Times isn't making up half of what they print?
 
They should have used voice biometrics instead with Siri, doesn't require additional hardware, doesn't need a specific pass phrase (passive biometrics), and it can even do liveness testing, i.e. ensuring the voice is not a recording.

But ideally, I think Apple should include multiple biometrics - finger, voice, and perhaps even biorhythms.
 
Won't believe this untill i see it being discussed on a real news website.. You know. One that really focus on TECH. lol
 
I call bolderdash on this. As someone else had said. I want the to do the whole process and restore the phone to factory setting while filming and pull the fingerprinting BS and see if it works... he could have just program the other finger before filming to then claim he went around the security protocols

And CNN could be just making up wars to get more viewers.

----------

People falling for this crap need to be banned using the internet.
You mean anything you have not faked yourself, you don't believe?
 
Because if others cannot replicate it, the CCC would have a big egg on their face like 60 Minutes had it when they published the faked George Bush National Guard service documents. If you know for sure that you will be found out when lying, most people don't lie.
And we should trust the CCC because ???
 
There is no way to disable Activation Lock using your fingerprint.

This is useless to thieves. And it's a LOT of trouble to go to in order to gain access to someone's Facebook account.
 
So what is the point? that's how optical recognition works, principally.
The question should be that if the perpetrator is cunning and smart enough to lift my fingerprints off the subject I have touched in order to gain access to my phone, then he deserves all the credit for using low tech espionage techniques.
I then should hand him my phone as a gift. If my family members use such method on me, I would dis-own them.
 
The whole point of this Touch ID was that it would increase security. If it really has been hacked by a fairly common technique then this is certainly a failure on Apple's part and damages their image.

It was also convenience. If it offers the same level of security with more convenience it could work. The issue with the pass codes is that someone can tell from the fingerprints what 4 buttons you press most often. That reduces a 1-in-10,000 chance to 1-in-24.

In any case, maybe this is why Apple didn't roll out Touch ID for non-Apple applications.
 
No, every finger has different prints. Using a different finger on the same hand is as different as using a different finger on a different person's hand. Why else do you think you have to register each finger individually?

Honestly, people these days lack even basic knowledge of the topic they talk about...

Okay...down boy. Yes I did know that. The problem was I wasn't paying enough attention to the video to notice he used a different finger. Yes it is my mistake. But thanks for your last sentence impugning my intelligence, do you feel empowered? ;)
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.