Researchers Develop New Way To Steal Passwords Using Google Glass

mpicpp writes with a story about researchers who have developed a way to steal passwords using video-capturing devices.Cyber forensics experts at the University of Massachusetts in Lowell have developed a way to steal passwords entered on a smartphone or tablet using video from Google's face-mounted gadget and other video-capturing devices. The thief can be nearly ten feet away and doesn't even need to be able to read the screen — meaning glare is not an antidote. The security researchers created software that maps the shadows from fingertips typing on a tablet or smartphone. Their algorithm then converts those touch points into the actual keys they were touching, enabling the researchers to crack the passcode. They tested the algorithm on passwords entered on an Apple iPad, Google's Nexus 7 tablet, and an iPhone 5.

Comments

Watching them enter the passcode.

[Anonymous Coward]

TLDR - Researchers steal passwords by watching them being entered.

I've always thought

[Registered Coward v2]

electronic keypads should randomize the numeric order and that the device should not mirror the letter typed on the inout line or on the keypad.

Re:I've always thought

[Wootery]

That's why you'd have it opt-in. Let the security-conscious lead the way.

Google Glass only?

[tomhath]

I suppose you can be more subtle about it, but really any video cam would work just as well. Especially if you set it up near a place where people will be typing a useful password instead of loitering and staring at people.

Re:Google Glass only?

[oodaloop]

I know, I must be new here and everything, but it does in the first sentence of the fantastic summary, "and other video-capturing devices".

Cover your input

[briancox2]

For the last couple of years I have been completely covering any input I give to a phone unlock or ATM PIN given. With cameras everywhere, this was only a matter of time.

Re:Cover your input

[Hamsterdan]

Damn you! When I tried to cover my hand with the other one, my phone dropped to the floor...

Sensationalistic title and duh!

[pr0t0]

As the video points out, this is not limited to Google Glass, any video capturing device will work. But beyond that, this is really kind of obvious. Yeah, video recording someone entering their password on a touch device will give you a fairly accurate idea of what that password is. Record, playback at 1/4 speed, password. I would bet that security camera footage might even be better to work with due to the angle. The custom software I suppose is a nice achievement, but I would guess it's not all that necessary.

Re:Sensationalistic title and duh!

[Sperbels]

Don't interrupt the Glass hating. Glass is evil. Look at all these new avenues of terrorism it makes available to the common man.

Re:That does it

[swillden]

Time to trademark a 'No Glass Allowed' symbol.

Better make it "No Cameras Allowed". Which, incidentally, also means "No Smartphones or Tablets Allowed", since they all have cameras... which would actually eliminate the risk of passwords being stolen as they're entered into a smartphone or tablet, since no smartphones or tablets are allowed. Problem solved!

Let me fix that for you

[bl968]

Researchers Develop New Way To Steal Passwords Using a video camera