Bruteprint attack can cheaply unlock various fingerprint-secured phones

Original paper here - https://arxiv.org/pdf/2305.10791.pdf

Looks like the exploit requires physically opening the phone and attaching a cable to the phone motherboard/fingerprint reader chip.

I think the fact that some phones (read: iPhones) are resistant to this is pretty awesome.

It is comforting to know that this isn’t a remote exploit of course, but if my son were to cat lost, I wouldn’t want the threat of an actor getting access to my phones contacts to exist.

Well, at least it was some hours on near-latest phones with specialized hardware and software (latest and Pixel phones are missing from the study for some reason). Looks much safer compared to Apple's FaceID which was unlocked under 120 seconds with no special hardware attached to the phone (reported by the same Security Lab Tencent): https://www.forbes.com/sites/daveywinder/2019/08/10/apples-i...

I'd always assumed it would be easier to lift a fingerprint from the many on my case and screen, unlocking in a single attempt.

at least for iPhone, a fingerprint alone is not enough. it has to "look like a finger" to the sensor.