Re:Chaos Computer Club breaks Apple TouchID
by dannyr on Sunday September 22, 2013 @06:22PM
(#6428312)
People actually do other actions on their phone after unlocking it.
If somebody swipes on their homescreen, browse the web, etc, the trail would not be just the unlock pattern.
The exploit you're talking about may work if you get hold of the phone right after the user unlocks it since the trail only has the pattern.
Re:Chaos Computer Club breaks Apple TouchID
by jlmorton on Sunday September 22, 2013 @06:55PM
(#6428411)
True enough, there is other "noise" on the phone, in the form of point-like finger prints, and even other trails. But you're imagining a blank phone, where you have to try and discern one trail from another. Now turn the phone on, and the unlock background appears. Which trails intersect all of the dots of the unlock background?
It's much easier that you imagine. I've been using my phone as I normally do throughout the day, and I can see the unlock pattern clearly on the phone.
That's why you need a unlock pattern that intersects / overlaps itself. (Not foolproof, just makes that attack harder.)
Re:Chaos Computer Club breaks Apple TouchID
by tcoppi on Sunday September 22, 2013 @06:42PM
(#6428379)
It also doesn't work nearly as well if you are OCD about wiping your screen often, not that that makes the pattern lock any better but it isn't quite that trivial to defeat
Re:Chaos Computer Club breaks Apple TouchID
by 6d0debc071 on Sunday September 22, 2013 @08:23PM
(#6428660)
Doesn't the trail get cleaned off when you put it in your pocket?
Re:Chaos Computer Club breaks Apple TouchID
by andrewflnr on Sunday September 22, 2013 @10:00PM
(#6428847)
No, it takes pretty vigorous scrubbing, at least on mine.
TouchID represents a massive increase in security over draw pattern to unlock, and it's easier to use at the same time.
It probably also represents an increase in security over 4 digit PIN codes, though that's shakier.