Slashdot Mirror
CCC Says Apple iPhone 5S TouchID Broken
hypnosec writes with word that the Chaos Computer Club claims to have "managed to break Apple's TouchID using everyday material and methods available on the web. Explaining their method on their website, the CCC hackers have claimed that all they did was photograph a fingerprint from a glass surface, ramped up the resolution of the photographed fingerprint, inverted and printed it using thick toner settings, smeared pink latex milk or white woodglue onto the pattern, lifted the latex sheet, moistened it a little and then placed it on the iPhone 5S's fingerprint sensor to unlock the phone." Update: 09/22 21:32 GMT by T :Reader mask.of.sanity adds a link to a video of the hack.
It might, if it were true. The included video certainly doesn't prove the claim.
It's a capacitative scanner. It's not a photo scanner. So the fact that the claimed hack revolves around a photocopy makes it distinctly dubious. And the included video certainly doesn't prove the claim.
But it's interesting that you are more willing to trust an anonymous hacker than a blue chip company.
Me, I'll avait confirmation one way or the other.
It's a capacitative scanner. Whether you like it or not, that's not imaging the surface layer of skin, but the complexity of what's behind it. And yes that includes blood vessels.
It's far easier to see how the video in the TFA could be faked than a capacitative image of a finger could be.
That you can even write that is hilarious. I am never willing to trust a blue chip company's marketing department. They are paid to exaggerate and tell outright lies. Hacker groups on the other have a reputation to keep up so are far less likely to make claims like this if they're not true. It doesn't matter if Apple are dishonest when you have retards willing to queue for 4 and a half days to get a fucking phone.
Yes, Apple has been confirmed lying due to a gelatin finger being able to program the TouchID sensor to begin with. No blood vessels, well below the temperature of a human body, and certainly no pulse.
If their technology looked for these things, than a gelatin finger couldn't be used... ever.
Thirty four characters live here.
Yes it was an interesting episode of Mythbusters. SEVEN years ago.
Capacitative finger print scanners are a bit more of a challenge. And the included video doesn't prove it's been defeated yet. As photocopiers don't tend to deal in capacitative imaging, neither input nor output, I'm dubious.
But I await confirmation one way or the other.
That pattern happens to be the fingerprint, which can also be read with a photo scanner (epidermal and sub-epidermal tissues have the same pattern).
Only in part. As pointed out where, the capacitative image will include other features such as blood vessels, which the photographic scan can't.
So, if you can get a high-quality photocopy of the print, you can reproduce the pattern the capacitive scanner reads.
So, for the sake of argument, you can get a near visual equivalent of the capacitative image. Now how do you make that visual image readable on a capacitative scanner? Ah yes, major flaw there.
Photocopiers do visual images, both input and output. It seems unlikely they are much good for replicating capacitative images - for two reasons (input and output).
You forget the fact that the CCC used milk and latex to simulate human skin, to trick the capacitors.
And how exactly is the capacitative image of the finger copied? Hint: photocopiers don't copy capacitative images. Neither input nor output.
A very old technique btw.
...For photographic fingerprint scanners.
Some people seem to think that tricks that worked on Mythbusters 7 years ago work on entirely different technology today.
Anonymous hacker? The summary clearly states it was hacked by guys and girls from the CCC.
And the name/names of those people making the claim are?
And yet you provide no argument for that.
Oh really. So how do you imagine you copy a capacitative image on a photocopier?
Touch ID isn't a visual scanner augmented by a capacitative test for the presence of something with a similar capacitance to a finger. It's a capacitative scanner. Until there is such a thing as a capacitative copier, photocopying ain't going to work. Regardless of what finger like substrate you use.
But they haven't.
Claims like yours are why one doesn't automatically believe what you read on the internet.
...7 years ago.
That's a long time in technology.
"What makes it highly unbelievable is none of that. It is the reputation of Apple that makes it unbelievable. They aren't about to sacrifice a reputation it took them more than 30 years to build, especially for essentially no gain. If it was an unknown company I'd say maybe they were lying about how the fingerprint scanner works. But this is Apple we are talking about here."
Still content free I see. Goodbye troll.
And,until it is reproduced and shown to be a plausible exploit, one can make the claim than an Android fan-boy is behind a disinformation campaign.
If you don't like Apple products or the company, why do you care what they do? You really don't see Apple fans trolling Android stories, do you? Exactly. So, why all the hate?
Now, let's see if this hack is verifiable and reproducible before spouting off that which we have no basis to speak, shall we?