Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: Hostage
You’re quick to step in it without asking for details and that makes you both look foolish.

Purchase an iphone and there are two choices:

1. Imprint your own fingerprint.
2. Imprint your finger wearing a membrane with a fake fingerprint or one of someone you don’t like.

Because if your goal is to use the iphone as a means of theft, then you want nothing pointing back to you so option 1 above is not an option for the hacker/thief.

Therefore, option 2 is the only option and finger membranes are easy to make or obtain, and they are easier than contact lenses to use.

The only one looking foolish here is you, Hostage. . . and idiotic. I said the iPhone security could not be broken, I did not say it could not be spoofed. It certainly can but it not "easy to make or obtain, nor easier to use than a contact lens." The only person who has accomplished it has done so using super glue deposition techniques, casting a thin film membrane, picking up the super-glued imprint of the correct fingerprint, and then gluing it on a living finger. . . And even then got a one positive result in six attempts result in unlocking the iPhone with TouchID. He bemoaned that Apple did not lock out TouchID after a certain number of false tries, apparently unaware it now requires a passcode after five failed attempts.

“I don’t see this to be a risk to consumers in any way because I don’t think criminals are sophisticated enough,” Rogers said in an email interview. “It is difficult to make these fingerprints—think of Touch ID as being the equivalent of a door lock. It's there to stop the average criminal from getting access, or in the case of Touch ID, claiming they are you.”

Not only does a potential hacker need a clear print from their target that can be lifted by using super glue fumes and fingerprint powder, they will also have to get access to lab equipment to photograph, print, and then cast the fingerprint using chemicals and smearing it with glue. Unless you have access to a crime laboratory, the equipment is prohibitively expensive. . . .

Even though Rogers is impressed with the technology, he says Apple could do more to keep devices secure. Some improvements, he says, could include limits on the number of unlocking attempts a device will allow, a fallback to a passcode when the device hasn’t been used for a specific amount of time, and “best practices” suggested by Apple which may include using different fingers for different authentication.

—Source: Readwrite.com "Apple's Touch ID Fingerprint Scanner Is Still Hackable, But Don’t Panic This is not an easy attack" September 23, 2014.

So your "easy" claim is shot down completely. Again, your idiotic scenario from before was an after the ID theft exploit, this requires a complex technology scenario to spoof access not available to the average thief. Rogers failed to notice that Apple has already implemented all excet the different finger for different authentication security, which I think would be a good idea.

Could the police use this technique? Yes.

Really, you wouldn’t know real security even if it was pointed out to you because real security blends in with ambient backgrounds and contexts.

That's a bunch of words strung together that means absolutely nothing in this context. Much like all of your anti-Apple posts.

I can see that the Touch ID was an afterthought.. Someone quickly thought of the stolen phone scenario and the marketeers at Apple decided to patch in a failed tech to cover up the flaw.

You cannot see beyond your deranged hatred of anything Apple. As I said, you suffer from MAPS. ApplePay is far better than anything else being offered at this time and the Creditcard companies and banks, who ARE far better versed in such security matters than YOU, Hostage, have vetted it and accepted it as such, and are signing on, putting their money at risk—something they HAVE NOT DONE with Google Wallet. I think I will trust their judgment far better than some anonymous anti-Apple idiot on the Internet who has amply demonstrated his ignorance in the past. You. My brother-in-law was the head of IT Security for MasterCard for many years until his retirement. He thinks Apple has nailed it for point of sales security for consumers. Again, I think he knows one hell of a lot more about what's requ than you do. . . and he is not any kind of Apple user.

39 posted on 11/02/2014 2:14:56 PM PST by Swordmaker (This tag line is a Microsoft insult free zone... but if the insults to Mac users continue...)
[ Post Reply | Private Reply | To 36 | View Replies ]


To: Swordmaker

Oh my, look here ... an applephile thrashing about, drowning while shrieking how great the water is and calling names at those who comment how the water is contaminated. It would be funny if it wasn’t so pathetic.


48 posted on 11/03/2014 8:10:29 AM PST by Hostage (ARTICLE V)
[ Post Reply | Private Reply | To 39 | View Replies ]

To: Swordmaker

Oh my, look here ... an applephile thrashing about, drowning while shrieking how great the water is and calling names at those who comment how the water is contaminated. It would be funny if it wasn’t so pathetic.


51 posted on 11/03/2014 8:59:52 AM PST by Hostage (ARTICLE V)
[ Post Reply | Private Reply | To 39 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson