Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Hackers Trick Samsung Galaxy S8 Iris Recognition Using a Printed Photo and a Contact Lens
- Thread starter MacRumors
- Start date
- Sort by reaction score
Accolades aside, there is nothing wrong with Siri as a concept, but there is something seriously wrong with its execution.
"A concept is an overarching thought. The execution is how you deliver that thought."
Didn't Touch ID get defeated by a nipple?
The point is, these are security feature meant for daily use. Of course anything can be tricked given the right set of highly unlikely circumstances and tools.
The point is, these are security feature meant for daily use. Of course anything can be tricked given the right set of highly unlikely circumstances and tools.
Duuuuuuude. That's so insecure. I use a long alphanumeric passcode: 69Mustangissomuchbetterthan69camaroandmy69mustangsisbetterthanallcamarosnoonedeniesthis1. It's my passcode for everything. Granted it takes me a good 20 minutes to enter this but SECURE amirite?
You speak the truth. Better something than nothing- and yes, you are far more likely to be hacked over the internet than in person.
Sigh. No.
A nipple was registered to the device so then it could be unlocked with said nipple. You could do the same with any bit of skin.
Nothing was hacked, it was operating exactly as it should have been.
TouchID can become pretty much "unbreakable" if only Apple includes these options in the security settings:
- mandatory password login after only 1 failed attempt with TouchID
- mandatory password login if the phone was not used for a set period of time (should be user selectable; I would be happy with 0,5-5 hours time interval)
Thats it. Makes it way more secure right there.
It was totally staged! The guy looked directly into the camera for a clear shot. Once again, I put the challenge to you also. Go ahead and start taking photos of people this way and then tell us how many black eyes you come back with.
You would literally have to stalk that person to get the right shot (which I'm not saying is impossible, but really very difficult).
All technology is fallible, think about it if it wasn't there would never be a hack ever. For this"hack" to work they needed a picture of the iris used to set-up the phone. How many people have pictures of your iris? Then how many people know you have a Samsung phone? Then how many of these people were able to "acquire" your said phone. It's a fun party trick but it's BS in the real world.
As with Touch ID, the security an iris scanner could deliver is highly situational. Probably good enough to keep strangers out if you lose the device, but can be defeated by persons close to you or by law enforcement. Thus for me the interesting bit is how much authorisation this security feature gives in the first place.
I completely agree. It is because of this that Touch ID doesn’t give me that much confidence. The same with Siri really, I had to disable it, because it discloses too much personal information to anyone who asks.
I completely agree. It is because of this that Touch ID doesn’t give me that much confidence. The same with Siri really, I had to disable it, because it discloses too much personal information to anyone who asks.
Duuuuuuude. That's so insecure. I use a long alphanumeric passcode: 69Mustangissomuchbetterthan69camaroandmy69mustangsisbetterthanallcamarosnoonedeniesthis1. It's my passcode for everything. Granted it takes me a good 20 minutes to enter this but SECURE amirite?
#FoundOnRoadDead
My banking is protected (Swedish wonderful app BankID, require my 10-digit personal number and 10-digit passcode), never store important passwords in browser, don't use social media (at all, actually, no facebook, no twitter, no nothing). Mail accounts are on my private server, if they change the password I can easily change it to something they have no clue of.
So, no, no important stuff or passwords on the phone, who needs passcodes?
I can probably wipe the phone faster than they can do damage even if I had passwords I cared about on the phone.
My phone is a phone which I use to communicate with people foremost, not keep my digital life.
You were doing good until you over-reached right at the end there. Did you read what the testers had to do to "defeat" the scanning technology? Even TouchID doesn't live up to the standards you imply, and it never was meant to. TouchID, Iris scanning, and whatever other biometric scanner in these consumer level devices is meant to be a balance between convenience and security. In regard to TouchID, even Tim Cook said it was a solution to increase security because people were disabling their access code altogether. TouchID, while not 100% secure, it 100 fold better than nothing. If the Iris scanning tools provide a similar level of ease of use, then they have done their job. Oh, and for what it's worth, it seems that many Apple fans live for the "first and one-up" moniker. Don't know how Samsung is getting slagged for that.
Sorry, but you are very wrong about this. Modern mirrorless cameras are way smaller and more discreet than DSLRs while delivering stunningly sharp pictures. Lenses are also smaller. You have automatic eye detection, so the eye will always be in perfect focus. Even if the eyes wander, with high-speed bursts of pictures you will get a direct iris picture very, very easily.
That being said, it's still a method that demands a considerable amount of gear and effort. So it's not that big of a deal in normal circumstances. The bigger problem, according to various reviews, is that the iris recognition (of your own eye) is rather flaky and unreliable.
That kinda defies most of the point of having a smartphone..
Even so, damage can still be done. With an unlocked iPhone you can find out the phone's common locations - your work and home for example. In the phonebook you will likely have your home number, so potentially a criminal could find your phone, travel to your house, ring your home phone to see if anyone's in. If not - easy pickings.
And that's just for starters. Every tiny bit of info can be used against you, even your messages.
I'll stress this again, you should really lock your phone. As much as you feel like there is nothing of importance on there, I guarantee you there is.
A much safer recognition would be "Butt ID".
It is a fact, that every person has a unique skin pattern around the sphincter ani.
A smartphone, that could recognise that pattern could give access to its owner. The main advantage over the Iris is, that it can not so easily be photographed in public, through surveillance cameras etc... because it is usually covered by clothes.
Butt ID would theoretically be hack proof.
It is a fact, that every person has a unique skin pattern around the sphincter ani.
A smartphone, that could recognise that pattern could give access to its owner. The main advantage over the Iris is, that it can not so easily be photographed in public, through surveillance cameras etc... because it is usually covered by clothes.
Butt ID would theoretically be hack proof.