News for hackers. Stuff that matters.
Re:Chaos Computer Club breaks Apple TouchID by Steko on Sunday September 22, 2013 @07:30PM (#6428506)
This seems correct. Apple's moved the bar to breaking into those phones from having the phone and a 4 digit or no passcode to having:

-- the phone

-- a 2400 dpi resolution image of the correct fingerprint

-- a 1200 dpi laser printer & transparent paper

-- pink latex milk or white woodglue

-- a non-trivial amount of time

Re:Chaos Computer Club breaks Apple TouchID by javajosh on Sunday September 22, 2013 @07:55PM (#6428585)
That's what I was thinking, too. The fingerprint scanner is a bit like a LoJack - it's still possible to steal a car with a "The Club" on it, but most thieves will probably just move on to another car (although I've heard that car thieves, like pick pockets, don't really steal cars anymore, just components and loose gear.)
Re:Chaos Computer Club breaks Apple TouchID by codfrantic on Monday September 23, 2013 @07:52AM (#6430201)
>although I've heard that car thieves, like pick pockets, don't really steal cars anymore, just components and loose gear.

I heard that too, airbags, satnav and entertainment systems are the target...

Re:Chaos Computer Club breaks Apple TouchID by XorNot on Sunday September 22, 2013 @11:13PM (#6429015)
The problem here is your implying getting past the 4 digit code is substantially easier then cloning a finger print.

The code is in someone's head, or you have to deconvolute it from screen smudges. Your fingerprints are literally everywhere you go.

Re:Chaos Computer Club breaks Apple TouchID by mmorris on Sunday September 22, 2013 @11:27PM (#6429044)
I think it would be pretty easy to get many people's phone password -- just by being in the right place when they unlock it, and watching closely. Most people I know don't cover up their phone at all when they enter it, even in public.

So you don't need to get "in someone's head". You just need a good view of them using it.

Granted, getting an iTunes Store password by just watching would be a lot harder. But compared to the 4-digit lock screen pw (or even the Android shape pw) TouchID seems a bit more secure, at least to me.

Re:Chaos Computer Club breaks Apple TouchID by XorNot on Monday September 23, 2013 @11:04AM (#6431432)
Conversely you can just change a phone password. Hell you could rotate it daily if you wanted (surprised that's not a feature yet). But you can't change your fingerprints.
Re:Chaos Computer Club breaks Apple TouchID by seqastian on Monday September 23, 2013 @01:47PM (#6432747)
or you could just rotate your fingers/toes/nipples?
Re:Chaos Computer Club breaks Apple TouchID by r00fus on Monday September 23, 2013 @04:39PM (#6433980)
Do you think the finger prints you leave everywhere are a substitute for the 2400 dpi photograph?

I bet you if CCC wanted to make a much stronger case, they would have taken that image from a fingerprint on a glass - but that didn't work. They photographed the finger and not a stray print for a reason.

Re:Chaos Computer Club breaks Apple TouchID by julg on Monday September 23, 2013 @03:16AM (#6429510)
-- a lot of luck, because after 5 failed attempts, you must enter your passcode
Re:Chaos Computer Club breaks Apple TouchID by anonymfus on Monday September 23, 2013 @04:34AM (#6429654)
I have 8 digit pass code on my phone.
Re:Chaos Computer Club breaks Apple TouchID by sudo_robin on Monday September 23, 2013 @01:02AM (#6429224)
and also the fingerprint.