Apple Touch ID Can Be Hacked Using Play-Doh

A Chinese startup has exposed a dangerous flaw in Apple’s Touch ID biometric security verification system: it can be hacked using children’s modelling material Play-Doh. Jason Chaikin, President of mobile security firm Vkansee, demonstrated that Play-Doh can take a mould of a fingerprint which can then be used to unlock an iPhone via its fingerprint scanner.

The exercise is part of Vkansee’s marketing strategy to promote its new patented under-glass fingerprint scanner, which cannot be compromised in such a manner.

“The demand for under glass scanning that’s resistant to hacking is the number one thing that we hear from the device makers,” Chaikin told CNBC at the Mobile World Congress (MWC) in Barcelona on Wednesday.

Apple refused to comment on the incident, instead directing CNBC to the support page regarding Touch ID on its website.

“Every fingerprint is unique, so it is rare that even a small section of two separate fingerprints are alike enough to register as a match for Touch ID. The probability of this happening is 1 in 50,000 for one enrolled finger,” the Apple website reads. “Touch ID only allows five unsuccessful fingerprint match attempts before you must enter your passcode, and you can’t proceed until doing so.”

Toby Rush, CEO of EyeVerify, believes that multi-modal or multi-factor authentication solutions offer a greater level of security than fingerprint, or any authentication solution, alone. His company’s Eyeprint ID technology uses the front-facing camera on a smartphone to match visible blood vessels and other micro-features in the white of the eye.

“We look at micro features just outside the eye, the strongest being the blood vessels in the eye. They are stable, they work really well,” Rush told CNBC. “I think fingerprints are great and not going anywhere, fingers and eyes will win the day. Anyone in biometrics will agree that multiple options provide the best security in the most robust manner and best user experience.”

Image courtesy of Play-Doh Sets.

Is Touch ID Headed to MacBooks and Mac Mice?

A new rumour from Taiwanese site Apple.club.tw says that Apple is to bring Touch ID to its MacBooks and computer mice. Touch ID is the fingerprint scanning technology the company has included with the iPhone and iPad beginning with the iPhone 5s.

They say that scanner will be included above the trackpad on MacBooks and included on Apple’s Magic Mouse and Magic Trackpad. It’s suggested that this would allow users of Apple’s Mac desktops and MacBook laptops to take advantage of increased security, but more importantly it will bring Apple Pay to the Mac. Now many of you will envisage Apple Pay as a contactless payment system to be used in stores, however Apple Pay is also for use online, offering users the ability to simply tap the fingerprint scanner to allow them to make an online payment at participating sites.

Whether this rumour is true or not, it certainly seems like a logical and useful step for the implementation of Touch ID – it’d sure be nice to use it for password entry too.

Source: Apple.club.tw Via: MacRumors

Apple Acquisition of AuthenTec Meant No Nexus 6 Fingerprint Scanner

Back in 2012, Apple purchased biometrics company AuthenTec with the intention of including their fingerprint scanning technology in future iPhones and iPads. That technology became Apple’s Touch ID, first included with the iPhone 5s in 2013 and all iOS devices since. What we didn’t know, was that Motorola intended to incorporate this into their Nexus 6, but Apple’s acquisition left all but a tiny remnant of the company’s plans.

That remnant, according to former Motorola CEO Dennis Woodside, is the indentation that now holds the Motorola logo on the rear of the Nexus 6. Yes, that small dimple you see in the picture above.

In an interview with The Telegraph, Woodside says that Apple’s acquisition of AuthenTec meant no biometrics for the Nexus 6.

“Indeed, the 6-inch Nexus 6, he can now admit, was stymied by just one of those big players. A dimple on the back that helps users hold the device should, in fact, have been rather more sophisticated. “The secret behind that is that it was supposed to be fingerprint recognition, and Apple bought the best supplier. So the second best supplier was the only one available to everyone else in the industry and they weren’t there yet,” says Woodside.”

At least we all know what the dimple was for now.

Source: The Telegraph Via: 9to5Mac

Apple Exploit Can Disable ‘Find my Phone’ and Have Your Device Erased On Firmware 7.0.4

It appears that yet another bug cropped up in Apple’s latest iPhone iOS 7 firmware. The latest finding apparently lets you bypass the user password and deactivate the Find my Phone feature, hiding it from the iCloud.com page on which you can effectively track its location in case of losing it or having it stolen.

It is reported that replicating the bug is simple enough, and that repeated attempts were successful, according to MacRumors. The exploit was found on the current 7.0.4 firmware and can be performed by making a few changes to the iCloud account menu as shown in the video below.

[youtube]http://www.youtube.com/watch?v=QnPk4RRWjic#t=268[/youtube]

MacRumor reported to have replicated the exploit on firmware 7.0.4, but could not replicated it on the upcoming 7.1 firmware, leading to the possibility of it being fixed in the upcoming firmware release. To be noted is that the exploit can disable Find my Phone and have the iOS device erased, but it will not bypass Apple’s Activation Lock theft deterrent system. The handset will still be rendered unusable since it will always ask for the Apple account password for every action, such as downloading an app.

It is also noted that the exploit works on devices that do not have Touch ID or Passcode enabled, therefore it is recommended to enable at least the Passcode on your handsets if you do not own an iPhone 5s, at least until the iOS 7.1 firmware gets released and the exploit fixed.

Thank you MacRumors for providing us with this information
Video courtesy of MacRumors

Apple iPad 5 and iPad mini 2 Will Be Available In Champagne Trim

Apparently, silver and Space Gray aren’t the only two trims the iPad 5 will come in. The insane popularity of the Champagne trim on iPhone 5S forced Apple to make a last-minute change to its product stack. The company is mulling one for its upcoming 9.7-incher.

The Champagne iPad 5 and iPad mini 2 features the same shade of gold as the central portion of the Champagne iPhone 5S, since the iPad 5 doesn’t feature a two-tone back. The matching front bezel is likely to be white, just like on the iPhone 5S.

According to previously leaked news, the iPad 5 will adopt a similar narrow frame design, same processor and camera as on the previous generations, a 9.7-inch IGZO panel, support for stereo speakers, weight and thickness will be reduced, and may be equipped with fingerprint recognition. The iPad mini 2’s shape will have the same design, but the processor and camera will be improved, it may support fingerprint identification, but may not be equipped with a Retian screen.

Chinese publication CTechCN posted these pictures of what it claims to be the Champagne iPad 5 and iPad mini 2. The pictures look plausible to us although we won’t bet our gold on it.

Thank you NextPowerUp and CTechCN for providing us with this information.

Images courtesy of CTechCN.

Latest Leak Shows That iPad 5 Will Feature Touch ID

While the launch of the iPad 5 release date is closing in later this month, leaks and speculation have been continuously flowing. The latest is from a YouTube channel named Unbox Therapy.

Using one of the leaked iPad 5 front panels that have been roaming around from part suppliers, Unbox Therapy shows how the iPad 4’s current home button will not fit in the new build. However when he dismantled an iPhone 5S’ Touch ID home button and placed it into the iPad 5 case, they got a perfect fit. It’s like it was made perfectly for the iPad 5.

[youtube]https://www.youtube.com/watch?v=U6zEOiPlYtw[/youtube]

However, this  is not concrete evidence that Apple will include Touch ID on the new iPad. Apple is known to adopt its new technology into the whole line of iDevices, this including the iPad mini 2 as well. So this makes perfect sense to expect the newer iPad devices with Apple’s latest technology implemented.

On the other hand, the Sapphire Crystal home button that houses Touch ID is presumably under tight constraints thanks to iPhone 5S popularity, so in some regards, it may make sense for Apple to leave it out of this iPad generation – making for a bit of inconsistency. We will just have to wait for the release and know for certain what will the new iPad devices have in regards with the previous generations.

Apple hasn’t officially confirmed an event for October, but many publications have word Apple will announce the iPad 5, iPad mini 2, new Macs, and OS X Mavericks before the end of the year.

Thank you Pocket-Lint for providing us with this information.

Image and video courtesy of Pocket-Lint.