Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Samsung Admits Major Security Flaw in Galaxy S10 Under-Screen Fingerprint Sensor
- Thread starter MacRumors
- Start date
- Sort by reaction score
Source code of Samesung fingerprint logic:
Default accept any fingerprints;
If it recognizes the fingerprint is not authentic, reject it;
If it recognizes the fingerprint is authentic, accept it;
If they don’t know if it’s authentic or not, accept it;Even the sibling thing is unverified and it’s only happened to 6 or 7 people anyway. The working theory is that some of them retrained the Face ID by unlocking their siblings phone with the passcode multiple times first.
[automerge]1571315324[/automerge]
And after this patch it will be “if it looks like there’s a silicon case around the print, reject it” which doesn’t fix the underlying issue.
[automerge]1571315465[/automerge]
If you believe iPhones catch fire less than Note 7’s you’d be absolutely correct.
Genuinely interested in some sources for how people have spoofed Face ID. I know twins can (Apple has said so). But glasses and masks? I know about the very time consuming mask with weird cutouts and after many many failures they managed to bypass Face ID. I also think they had to disable attention awareness for it to work as well.
But I agree with you, biometric security is a convenience. Not as secure as a strong alphanumerical password. But Face ID is very good compared to many other systems.
I would buy this theory if her husbands fingerprint didn't work.
They thought no one would notice this issue. Junk.
Glasses can only bypass attention detection, you still need the actual person’s face.
Siblings are only anecdotal and mostly unconfirmed.
The elaborate 3D mask is the only one with any credibility but it would have locked for too many failed attempts long before anyone got it to work.
I think it’s amusing that when a company releases a new feature, they always indicate that they can’t bring it to older devices through a software patch as it requires newer hardware. But when a problem comes out the seems likely related to the hardware they’re like “we’ll just release a patch for that”.
You’re right it’s ALMOST like spoofing Face ID, but not quite. Because Face ID is still more secure by a large margin than this. Because to spoof Face ID is a very narrow set of circumstances. Nobody is ripping the iPhone from your hand and spoofing Face ID. Contrasted with this as it seems like the Samsung phone can ripped from your hand and the biometric security bypassed easily.
[automerge]1571315935[/automerge]
This finger print spoof doesn’t require an elaborate setup. Big difference.
No need to wait. Your own post should satisfy your needs.
Sold mine last week to switch back to an iPhone... glad I did!
Do banking apps trust the fingerprint authentication system on these Samsung phones? If so, that's terrible.
Lol, exactly! The S10 has been out since March 2019. Someone internally knew.
How can people purchase highly priced Samsung smartphones after all these major issues and still mock Apple is beyond me. I mean, the Galaxy fold, now this. I can only laugh.
Samsung just managed to produce a phone where the rate of battery failures was high enough that they 'had to' completely withdraw the product. iPhones never had such a high battery failure rate (percentage of phones affected within one month of purchase or mean time to failure).
I believe thats the kinda stuff you expect when you purchase a Samsung phone.
That is a major security flaw. A shame, as I was considering an s10e.
I hope they fix it.
Not going to even think about starting another Apple v. Samsung post, because Apple has been dropping the ball a lot lately.
I hope they fix it.
Not going to even think about starting another Apple v. Samsung post, because Apple has been dropping the ball a lot lately.
Last edited:
I appreciate Samsung trying things, but I feel like they rely too heavily on their users to be Beta testers.
Apple has periodically given Beta first looks at features (Siri, Portrait Mode), but you really can't justify mass producing a device with a security flaw this bad.
[automerge]1571316933[/automerge]
Yeah, but so far not in major security features like FaceID, TouchID
Oh but they can have the phone unlocked before it comes out of their pocket. Don’t you know how important that is? 😜
In totally unrelated news, Samsung has issued a stern reminder to all phone thieves and security agencies that it is extremely impolite to put screen protectors on phones that do not belong to them.
At this point, if you trust Samsung's non-Android implementation of features, you're kidding yourself.