• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to footer
  • Our Services
  • Contact Us
  • Newsletter
  • Top Nav Social Icons

FindBiometrics

FindBiometrics

Global Identity Management

  • Biometrics
    • What are Biometrics?
    • FAQ
    • Biometric Associations
    • Companies
    • Premier Partners
  • News
    • Featured Articles
    • Interviews
    • Thought Leadership
    • Podcasts
    • Webinars
    • Year in Review
  • Applications
    • Biometric Security
    • Border Control and Airport Biometrics
    • Consumer and Residential Biometrics
    • Financial Biometrics
    • Fingerprint & Biometric Locks
    • Healthcare Biometrics
    • Justice and Law Enforcement Biometrics
    • Logical Access Control Biometrics
    • Mobile Biometrics
    • Other Biometric Applications
    • Physical Access Control Biometrics
    • Biometric Time and Attendance
  • Solutions
    • Behavioral Biometrics
    • Biometric Sensors and Detectors
    • Facial Recognition
    • Biometric Fingerprint Readers
    • Hand Readers & Finger Scanners
    • Iris Recognition
    • Biometric Middleware and Software
    • Multimodal Biometrics
    • Physiological Biometrics
    • Smart Cards
    • Vein Recognition
    • Voice and Speech Recognition
  • Stocks
  • Events
  • Companies
  • Podcasts

iPhone Biometrics Spoofed Again, Expert Still Loves Touch ID

September 24, 2014

Last year, shortly after the launch of Touch ID, Apple’s smartphone fingerprint sensor on the iPhone 5S, Marc Rogers spoofed it. In a blog post at the time, Rogers – principal security researcher at Lookout – explained why he did it, how he did it and why the post-password solution still had a place in his good books.

Touch ID
Shortly after the release of the iPhone 5S, Touch ID was spoofed by a German hacking group named Chaos Computing Club. Since then, liveness detection has been at the top of the smartphone biometrics wishlist

A year later, we have been presented with two more iPhone models, each sporting a Touch ID sensor, and this time coming ready with a number of useful applications that can leverage a user’s fingerprint. Sure enough, Marc Rogers announced on the Lookout blog yesterday that he’s done it again, and he still thinks the fingerprint security on the iPhone is awesome.

“When the iPhone 6 came out the first thing I wanted to find out was whether or not there had been any changes to the TouchID sensor,” writes Rogers.

This was a concern on the minds of many identity management professionals considering that the increased range of Touch ID applications include the ability to make point of sale payments through the NFC powered mobile wallet, Apple Pay. No mention of improvement was made during the September 9 keynote, leaving the task of evaluating the security up to people like Rogers.

Using the same technique as last year, Rogers successfully spoofed his way past the iPhone 6’s sensor. Sadly, he reports that there is very little that suggests any kind of measurable security improvement. That’s not to say he didn’t find the process more difficult this time around: either due to higher resolution imaging or a larger scanning surface, the iPhone 6 models require a much higher quality fingerprint clone.

Rogers’ blog is a must read for those doubtful that consumer grade biometrics are an adequate password replacement for an iPhone’s lock screen.

“As it stands,” writes Rogers, “TouchID remains an effective security control that is more than adequate for its primary purpose: unlocking your phone.

It still can’t be denied that the lack of any significant Touch ID improvement is dissapointing. Though the sensor’s convenience and better than password security makes it a boon to consumers (especially with the reporting of lower false rejection rates), had Apple made a point of bolstering Touch ID this time around it would have gone a long way in opening up applications that require higher levels of assurance.

Now that Apple has competition in the smartphone biometrics space, it will be interesting to see if other OEMs that have invested in biometric security make a stronger point to offer improved security.

—

(Source: Mobile ID World)

Primary Sidebar

EXCLUSIVE MEMBERS ONLY CONTENT:

Become a FindBiometrics Member and gain easy access to specialty content, including the ID Tech column, replays of virtual events, and Identity School educational checklists:

ID TECH: What Role Will Biometrics Play in the Cyber Cold War? We’re About to Find Out [NEW]

Identity School: Facial Recognition Cheat Sheet

REPLAY: Travel & Hospitality Virtual Identity Summit

Sponsored Links

TECH5 showcase logo

TECH5 is an international technology company founded by experts from the biometrics industry, which focuses on developing disruptive biometric and digital ID solutions through the application of AI and Machine Learning technologies.

TECH5 target markets include both Government and Private sectors with products powering Civil ID, Digital ID, as well as authentication solutions that deliver identity assurance for various use cases. 

Learn more: www.tech5.ai

Onfido logo

Onfido is building the new identity standard for the internet.Our AI-based technology assesses whether a user’s government-issued ID is genuine or fraudulent, and then compares it against their facial biometrics. That’s how we give companies like Revolut, Zipcar and Bitstamp the assurance they need to onboard customers remotely and securely. Our mission is to create a more open world, where identity is the key to access.. For more information, please visit www.onfido.com

ThreatMark brings trust to the digital world by providing cutting-edge fraud prevention solutions. Major banks use ThreatMark’s AI-powered technology and behavioral biometrics to build secured banking experience to precisely verify their legitimate users, seamlessly across all digital channels. All while securing the users’ most precious assets and keeping the fraudsters away. Learn more: www.threatmark.com/

With its secunet border gears product portfolio and specialised consulting expertise, secunet supports police forces and security authorities in their sovereign tasks. Whether ABC gates, self-service kiosks or biometric middleware – each component helps to strengthen identity protection and to accelerate verification – in mobile and stationary scenarios.

Mobile ID World Logo

Mobile ID World is here to bring you the latest in mobile authentication solutions and application providers. Our company is dedicated to providing users with the best content and cutting edge information on technology, news, and mobile solutions for your mobile identity management needs.

Recent Posts

  • Web3 Gets Its First Smartphone, Featuring Biometric Authentication
  • Vivo X80 Pro Stands Out With Extra-large In-display Sensor
  • Apple Seeks to Kill Both the Password and the CAPTCHA With New Authentication Solutions
  • American Airlines Looks to Selfie Biometrics for Passenger Processing
  • VAIO Installs Fingerprint Sensors in New FE Laptops

Biometric Associations

IBIA and fido

Tweets

Footer

  • About Us
  • Company Directory
  • Advertise With Us
  • Contact Us
  • Privacy Policy
  • Terms of Use
  • Archives
  • CCPA: Do not sell my personal info.

Follow Us

Copyright © 2022 FindBiometrics