Quick Tip: Enable Touch ID for Sudo (2020)

Re:Quick Tip: Enable Touch ID for Sudo (2020) by satysin on Wednesday June 15, 2022 @07:00AM (#31751280)

Sorry but I have to nitpick here. Nobody was ever able to verify the fingerprint was the same as the German defence ministers.

What the attacker was able to do was take a high resolution photo of the defence ministers thumb and then produce a "fingerprint" that they could use to register as a "fingerprint" on their own phone and then unlock that phone with the "fingerprint".

It could be nothing like the defence ministers actual fingerprint but just look enough like any real fingerprint to register with a fingerprint scanner on a phone.

[ Parent | on HN ]

Re:Quick Tip: Enable Touch ID for Sudo (2020) by atoav on Wednesday June 15, 2022 @12:29PM (#31755436)

Thanks for the nitpick, you are right, but given the state of photogrammetry today I wouldn't be surprised if just a few pictures would be enough to give you an accurate representation.

[ Parent | on HN ]

Re:Quick Tip: Enable Touch ID for Sudo (2020) by colechristensen on Wednesday June 15, 2022 @12:03PM (#31755064)

If it was a good photograph Tia would be pretty easy to verify visually. It would also be trivial to replicate on towels to see if your methods actually were adequate to authenticate on your own device.

[ Parent | on HN ]