HNHacker News
TopNewBestAskShowJobs

mae9tvw5

93 karma · joined May 23, 2017

submissionscomments
mae9tvw5··on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
They have done it with a fingerprint left on the device screen later on, if i remember correctly.
mae9tvw5··on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
https://media.ccc.de/v/31c3_-_6450_-_de_-_saal_1_-_201412272...

They also managed to get the fingerprint of a politician via a high resolution picture taken at a speech. (Also a phone PIN via eye reflection captured by the front camera.)

mae9tvw5··on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
Yes. They explained all the innovative magic of Apple's fingerprint sensor was better image resolution. So all they had to do was improving that on their end too. I imagine the body changes everywhere over time, so this resolution game has a hard limit. A fingerprint is the worst choice of biometric data, as people leave them everywhere...
mae9tvw5··on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
>It's not like Apple doesn't run into similar problems (not sure if the fingerprint sensor has been defeated–it's a bad idea for 5th amendment reasons in any case). But at least they do the minimum in trying.

In 2013 a CCC member broke TouchID access within a few hours after release of the IPhone. All needed was a photograph of the fingerprint on a glass surface. https://www.ccc.de/en/updates/2013/ccc-breaks-apple-touchid

Same method worked on the Iphone 6, as Apple hasn't changed a thing. Biometry is fundamentally broken.