News for hackers. Stuff that matters.

A comment on Windows Hello bypassed using infrared image. Parent comment

Re:Windows Hello bypassed using infrared image by nitrogen on Monday July 19, 2021 @09:20PM (#27889162)
"Please press this key sequence, then type your password, on the newly attached keyboard to enable it for use."
[ Parent | on HN ]
Re:Windows Hello bypassed using infrared image by ivegotnoaccount on Tuesday July 20, 2021 @01:03AM (#27890253)
Then you will (probably) get malwares that open a window in fullscreen that imitates that prompt and sends data to a server.

You probably could add some kind of fingerprint that allow identifying the legit prompts, but since it is not done with login screens...

[ Parent | on HN ]
Re:Windows Hello bypassed using infrared image by nitrogen on Tuesday July 20, 2021 @01:05AM (#27890258)
This is why Windows used to ask for Ctrl-alt-del before login. And if you have malware already on your system, it's already too late.
[ Parent | on HN ]
Re:Windows Hello bypassed using infrared image by gregmac on Wednesday July 21, 2021 @05:36PM (#27912523)
Aside from already having malware making this irrelevant, if you didn't just physically attach a new keyboard, the message about a new keyboard is also going to seem very suspicious.
[ Parent | on HN ]