Smartphones can be fooled by fake, digitally composed fingerprints

Re:Smartphones can be fooled by fake, digitally composed fin... by pinum on Thursday May 11, 2017 @06:00PM (#14319877)

I understand it's difficult to test against the actual Touch ID, since it has aggressive hardware-enforced cooldowns and other defensive tech.

[ Parent | on HN ]

Re:Smartphones can be fooled by fake, digitally composed fin... by ballenf on Thursday May 11, 2017 @06:12PM (#14319942)

So it's a lock that's too hard to pick to prove how easy it is to pick?

[ Parent | on HN ]

Re:Smartphones can be fooled by fake, digitally composed fin... by mikeash on Thursday May 11, 2017 @11:18PM (#14321165)

It should be easy on a phone you control. You can try five times quickly, then it stops accepting fingerprints until you put in the password. This is a major problem for an attacker, but if you're just researching it then you can put in the password to reenable fingerprint authentication and then get five more tries. You should be able to try 20-30 fingerprints per minute.

[ Parent | on HN ]