Hacker News Reader

Comment by sonicanatidae | Hacker News Reader

HEADLINE: MICROSOFT SECURITY BYPASSED

First sentence of this click bait horse shit: Security researchers have found flaws in the way laptop manufacturers are implementing fingerprint authentication.

So fucking sick of clickbait.

View on HN

I dunno, it kind of seems fair to discuss what the thing actually looks like in the wild? Especially since to the average end user, the only information is "does this thing have the 'Hello' sticker on the case?" Like, yes, we need to talk about the actual details and the article should always lead with that clarification, but I'm not sure it's wrong to use that title.

The underlying hardware Sec is bypassed, which isn't microsoft.

This is like:

HYPER-SECURE DOOR LOCKS BYPASSED Thieves cut door out of wall!

While the lock was technically bypassed, it had little to do with the door manuf. The issue was what it was anchored to, a lot like this.

Based on the Blackwing paper the "Microsoft Surface Type Cover" hack seems pretty legit. They can gain login access to a Surface-with-cover by simply unplugging the cover and plugging in their evil USB device. That sounds like a bypass to me, no horse shit required.

That's completely on Microsoft, because they designed the hardware.

How do those two things not correlate? The first sentence of the article explains how MS security is being bypassed.

Hardware sec is being bypassed. Everything else is a consequence of that.

Reply on news.ycombinator.com