Hacking the Galaxy S8's Iris Biometric

It was easy:

The hackers took a medium range photo of their subject with a digital camera's night mode, and printed the infrared image. Then, presumably to give the image some depth, the hackers placed a contact lens on top of the printed picture.

Posted on May 26, 2017 at 12:50 PM • 6 Comments

Comments

Bob Dylan's Masterful FootMay 26, 2017 1:27 PM

It is easy if one is creative like that but to be perfectly honest that solution would not occur to me in a thousand years. Those rascals (shakes tiny fist)...

As Bruce has noted more than once being able to build things and being able to break things are not the same skill set.

Robert WoodMay 26, 2017 1:41 PM

Well, that being said it's probably not a good idea for any dissidents or any subversive minds to carry an s8, especially when traveling.


TerryMay 26, 2017 1:46 PM

@ As Bruce has noted more than once being able to build things and being able to break things are not the same skill set.

Except that the adage you're referring to can be equally interpreted to mean that no one build anything that works.

And then this crap get's repeated a billion times until everyone is brain dead. Like "you must drink 20 glasses of water a day"

MartinMay 26, 2017 1:53 PM

Perhaps each serious project should hire hackers to test the product in addition the usual rubber stamp product testers.

HaukeMay 26, 2017 4:46 PM

And strangely and yet unexplained, it worked best when the iris image was printed with a Samsung printer.

Jonathan WilsonMay 26, 2017 6:50 PM

Yet another reason not to use bio-metrics but to stick with a good old password or code instead (one that your adversaries can't easily guess and that is backed up by strong encryption on the device itself)

Leave a comment

Allowed HTML: <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre>

Photo of Bruce Schneier by Per Ervland.

Schneier on Security is a personal website. Opinions expressed are not necessarily those of IBM Resilient.