News for hackers. Stuff that matters.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by Gazk on Tuesday September 10, 2013 @02:16PM (#6361891)
This is great until someone removes your finger so they can access your phone.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by codezero on Tuesday September 10, 2013 @02:23PM (#6361998)
If someone is going to remove your finger to access the phone, you probably would just give them the four digit pin.

This is a way to get normal people to use better security than nothing and to give them the convenience of not having to enter an App Store password every time they install an app.

It's not meant to protect special forces operatives in the field or CIA analysts' contact lists.

Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by adamnemecek on Tuesday September 10, 2013 @02:27PM (#6362067)
Or just one digit, your finger.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by troygoode on Tuesday September 10, 2013 @02:25PM (#6362026)
I don't know about you, but I'd gladly give my password to someone today if they were threatening to cut off my finger. Unless you're seriously harder than me, what is the difference?
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by kybernetyk on Tuesday September 10, 2013 @02:37PM (#6362175)
But with this new technology $they don't even need you alive to get to your $secret_data.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by trebor on Tuesday September 10, 2013 @02:19PM (#6361934)
I think that this would be easily detectable by testing capacitance. The steel ring around the home button could potentially be used for that.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by georgemcbay on Tuesday September 10, 2013 @02:26PM (#6362049)
A dead finger is the same as a live one as far as capacitance goes unless it has been dead so long that all the moisture is gone, in which case you could just dip it in water prior to the scan.

Having said that, the idea of losing a finger to access the device doesn't really make much sense. You've got to incapacitate someone pretty well to take their finger off, so you might as well just force them to touch the phone while they are so incapacitated, unless you really like chopping off fingers.

Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by trebor on Tuesday September 10, 2013 @02:57PM (#6362379)
Humans are pretty powerful conductors, are you sure that a sensitive capacitance sensor couldn't tell the difference between a finger and a finger attached to a body? I don't know it for a fact, but I'd be surprised if not.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by georgemcbay on Tuesday September 10, 2013 @03:06PM (#6362488)
A garden variety capacitive sensor can't tell the difference between a human finger and a hot dog.

How do you propose it would beyond attempting to measure the amount of capacitance and mapping it to an accepted band? Attempting that is way too fragile a solution due to variability in humans and local weather conditions.

And even if you did put in the effort for that, an attacker could still fairly easily match the dead finger capacitance to the correct band pretty easily.

Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by option_greek on Tuesday September 10, 2013 @02:26PM (#6362038)
I do hope that the one removing the finger knows that.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by joezydeco on Tuesday September 10, 2013 @02:26PM (#6362045)
Capacitive sensing doesn't detect if a finger is alive or not.
Re:Apple’s Touch ID: A 500ppi Fingerprint Sensor Built Into ... by netrus on Tuesday September 10, 2013 @02:30PM (#6362099)
That's why eye-scanner authentication makes me shiver...