Re:Windows Hello bypassed using infrared image
by nasut on Tuesday July 20, 2021 @03:56AM
(#27891066)
” They could have provided a reprovisioning tool, but it's Apple, so they didn't.”
They did
Re:Windows Hello bypassed using infrared image
by ohazi on Tuesday July 20, 2021 @06:11AM
(#27891877)
It seems like maybe Microsoft should have required something like this for Windows Hello cameras, if they intended for people to use the hardware as a single factor authenticator.
i.e. the camera generates internal crypto keys and tells Windows about them when you set up Windows Hello, then Windows does a challenge/response to make sure it's getting an image from the authentic camera during login attempts.
Apple did something like this with the fingerprint reader home buttons on iPhones, which is why you had to replace the motherboard + home button as a single unit on damaged devices. They could have provided a reprovisioning tool, but it's Apple, so they didn't.