Samsung did not learn from the mistake of Apple. SRLabs has released a video on YouTube showing visible below it is easy to deceive the reader fingerprint Galaxy S5 and take control of PayPal. They first train the phone to recognize their finger, then immediately test the sensor with a rubber stand-in. Sure enough, they get right in.
The footprint provides access to more information on the Galaxy S5
The big difference between the system and the Samsung and Apple TouchID is only used to register on the phone and on the App Store. The worst that can happen is to purchase an application. By cons, Samsung delivers a PayPal application with the phone using the fingerprint reader to replace the use of a password. As shown in the video, a copy of the footprint can register with PayPal and access to bank accounts of the user
It should take a step back. The flaw is only exploitable if we manage to get the user's finger, which is not an easy task. PayPal is already cracked a statement to say that the fingerprint authentication is "easier and safer".
The footprint provides access to more information on the Galaxy S5
The big difference between the system and the Samsung and Apple TouchID is only used to register on the phone and on the App Store. The worst that can happen is to purchase an application. By cons, Samsung delivers a PayPal application with the phone using the fingerprint reader to replace the use of a password. As shown in the video, a copy of the footprint can register with PayPal and access to bank accounts of the user
It should take a step back. The flaw is only exploitable if we manage to get the user's finger, which is not an easy task. PayPal is already cracked a statement to say that the fingerprint authentication is "easier and safer".
No comments:
Post a Comment