Re:Quick Tip: Enable Touch ID for Sudo (2020)
by hnaccount_rng on Wednesday June 15, 2022 @07:02AM
(#31751292)
But that wouldn’t work with TouchID sensors right? They also check for “living tissue”. And at that point the attack becomes _very_ expensive to perform
[ Parent
| on HN ]
Re:Quick Tip: Enable Touch ID for Sudo (2020)
by atoav on Wednesday June 15, 2022 @12:36PM
(#31755532)
I mean, as a electronics guy I'd say it kinda depends on how that living tissue detection is being done. You can trick a lot of sensors into outputing things that don't make much sense if you know which physical properties they are looking for.
The most sophistication would probably be something like a PPG (optical reflection changes due to blood flow in certain bands). If the fake is thin enough the PPG would likely just shine through it. Skin resistance/humidity can be easily faked as well.
Re:Quick Tip: Enable Touch ID for Sudo (2020)
by kaba0 on Thursday June 16, 2022 @08:44AM
(#31765391)
It was mentioned elsewhere in the thread that a not too thick layer of gummy bear could fool it, due to light passing through it, but getting reflected back from the back. Not sure how true is it though.