News for hackers. Stuff that matters.

A comment on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8. Parent comment

Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by lawl on Tuesday May 23, 2017 @07:01AM (#14400265)
> CCC were able to do this for about the cost of a S8.

I think you misunderstood this. The cost was buying the S8.

You only need a laser printer, a decent camera and a contact lens.

[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by bebna on Tuesday May 23, 2017 @07:16AM (#14400315)
That is what he meant. Doing it better is that easy, that the cost of the S8 is more expensive then the hours of programming labor.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by StavrosK on Tuesday May 23, 2017 @07:43AM (#14400415)
What programming labor? They just printed a photo and put a lens on it.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by lorenzhs on Tuesday May 23, 2017 @07:59AM (#14400490)
I think that tbihl and bebna are trying to say that it would cost Samsung less to defeat the attack by programming one of the listed countermeasures than it cost the CCC folks to buy one of these phones. (I don't agree.)
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by tbihl on Tuesday May 23, 2017 @09:40AM (#14401064)
That is exactly what I meant. Like you're probably thinking, my estimate IS an amateurish one, taking into account no business admin/healthcare/etc. But I remember implementing this (as a small part of a project) at a time when I couldn't be bothered to put more than a few hours into any project. At any rate, I can't explain their failure to implement these checks, because they're SO trivial.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by jstanley on Tuesday May 23, 2017 @07:47AM (#14400439)
You're agreeing.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by StavrosK on Tuesday May 23, 2017 @07:54AM (#14400470)
Yeah, well, in that sense, the cost of the S8 was also higher than the hours the researchers spent scrubbing toilets to develop this exploit.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by restalis on Wednesday May 24, 2017 @08:52AM (#14409614)
"You only need a laser printer, a decent camera and a contact lens."

No, considering that the picture doesn't have to be that good, you need only a rogue picture from somewhere on the Internet (Facebook, Instagram, or whatever), the means to get it printed cheaply (most likely using a public printing service), and the contact lens. Oh, and the contact lens don't have to be new/hygienic. The total cost boils down to pennies.

[ Parent | on HN ]