News for hackers. Stuff that matters.

A comment on Smartphones can be fooled by fake, digitally composed fingerprints. Parent comment

Re:Smartphones can be fooled by fake, digitally composed fin... by derefr on Thursday May 11, 2017 @07:16PM (#14320302)
In "real life"—unless there was some absolute urgency to the problem—you wouldn't try to reconstruct a smudged partial print; you'd just use social engineering/espionage tactics to get a good print.

(Remember that iOS locks and/or wipes devices after 10 failed attempts. You want to go to however much effort is required to be perfect the first time.)

I can think of a number of situations one could create where a person would have no incredulity about actually inking their fingers and carefully applying fingerprints to a piece of paper. Committed adversaries aren't scared of crimes like "impersonating a police officer", remember.

[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by bigiain on Thursday May 11, 2017 @08:38PM (#14320633)
I imagine that sort of "committed adversary" is also quite capable of hitting you with a $5 wrench until you tell them the passcode...
[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by Ntrails on Friday May 12, 2017 @04:59AM (#14322405)
They only have to hit you once, and then put your finger on the button
[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by derefr on Thursday May 11, 2017 @09:24PM (#14320807)
I was presuming the sort of high-profile target where kidnapping them would quickly get some snipers emplaced and/or a MOAB dropped on you. If you want to, say, steal a nuclear submarine, you can't just kidnap an admiral and force them to hand over the keys. :P
[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by Mtinie on Thursday May 11, 2017 @10:09PM (#14320947)
No, that's the inelegant solution. Blackmail works far better with far less blowback.
[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by bigiain on Thursday May 11, 2017 @10:32PM (#14321010)
Or you just subvert their democracy and insert your own puppet commander-in-chief - that way you get _all_ the nuclear submarines...
[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by kalleboo on Friday May 12, 2017 @12:04AM (#14321359)
> Remember that iOS locks and/or wipes devices after 10 failed attempts

You only get 5 attempts at TouchID - 10 attempts is for the passcode.

[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by spondyl on Thursday May 11, 2017 @08:44PM (#14320659)
Well, 10 failed attempts doesn't necessarily hold water anymore.

Wasn't that whole "Can the FBI convince Apple to unlock this iPhone" case solved by backing up the NAND memory and constantly reflashing it after the 10 attempts were used up?

I imagine the same process can be applied in this case too

[ Parent | on HN ]
Re:Smartphones can be fooled by fake, digitally composed fin... by snuxoll on Thursday May 11, 2017 @09:47PM (#14320887)
Things have changed in the iPhone 5s, you can't bypass the unlock limit by desoldering a NAND chip anymore.
[ Parent | on HN ]