Sunday, 29 December 2013

Germans Hack Apple's iPhone 5S Touch ID?

Germans Hack Apple's iPhone 5S Touch ID?



A respected German hacking group has claimed that it has, in two mere days, broken Apple's new fangled Touch ID. As you can see in their video above the whole process looks to be very complicated and anything but convenient for your average iPhone thieve.

One thing that some people have noticed was how the person who supposedly did the hack had to first program the phone to recognize his own print and then, without turning the phone off, he had to go through a very complicated series of steps to break into the phone. Had he turned the phone off he most likely would have had to use the passcode to get into the phone as well which is why some commenter's, like StephanosSavvakis, commenting on Engadget, stated:


"..... This video can be easily a scam. Plus, with a complicated process like that, you can be sure that fingerprint reading is one of the best security options you have."

In same Engadget thread another commenter, JamesO, added:

"Well unless the mugger is carrying round a fully lit photographic studio with a top of the range DSLR and accompanying macro lens on his back, and gets you to willingly hold still while he takes some shots of all 10 of your digits, I'll assume it's still secure."

Two other comments by StephanosSavvakis once again and Majipoor, also commented:


"@t0m I don't see how this method is considered easy. I also don't see why people believe that one day there will be a hack-proof security method :S Considering how demanding this method is, I'd say this is one of the most secure technologies out in the market yet."

"@t0m "like allowing for a secondary password or letting users set the period of time (say 4 or 8) hours when a password is required"

Which is exactly what Apple did: you need your password after restarting the iPhone or after 48h (a value which Apple could obviously easily modify if necessary).

http://www.iclarified.com/34057/about-touch-id-fingerprint-sensor-security-on-the-iphone-5s"


In conclusion, as far as my 2 cents goes I'm still on the fence about this hack until Apple officially responds itself. Many commenter's, like the ones above, think that the whole hack is somewhat questionable and I tend to agree. Then again, this German hacking group is among the very best in the field so I don't think it would be wise to totally discount this supposed hack, but without further proof I have my doubts. However, even if true, the whole hack involves such complexity that I personally wouldn't worry too much of it happening much in the wild.

No comments:

Post a Comment