2 stories

Chaos Computer Club Bypasses Apple's Touch ID System (With Copy of Original Fingerprint)

The Chaos Computer Club claims to be able to bypass Apple's new Touch ID fingerprint sensor with a photo of the original user's fingerprint. using everyday items. The bypass is demonstrated in this short video:

The system is detailed in a how to which requires obtaining the original user's fingerprint:
First, the fingerprint of the enroled user is photographed with 2400 dpi resolution. The resulting image is then cleaned up, inverted and laser printed with 1200 dpi onto transparent sheet with a thick toner setting. Finally, pink latex milk or white woodglue is smeared into the pattern created by the toner onto the transparent sheet. After it cures, the thin latex sheet is lifted from the sheet, breathed on to make it a tiny bit moist and then placed onto the sensor to unlock the phone. This process has been used with minor refinements and variations against the vast majority of fingerprint sensors on the market.
Apple's new iPhone 5s includes a fingerprint sensor called TouchID, which can be used to unlock the iPhone as well as make purchases on the Apple iTunes store. Users, however, can continue to use a pin or password as an alternative to the fingerprint sensor -- though that is arguably even less secure than duplicating someone's fingerprint. sensor, if desired.

Recent Mac and iOS Blog Stories
See 'Infinity Blade III' Running on the New iPhone 5s
'Google Translate' for iOS Updated with Handwriting Integration, Support for 7 New Languages
Official PlayStation 4 App for iOS to Launch Alongside Console in November
'Apple Configurator' Updated with iOS 7 Feature Support
SimCity Expansion 'Cities of Tomorrow' Coming November 12
Google Releases New Universal 'Quickoffice' iOS App for Free
Google Drops NFC Requirement for Google Wallet, iOS App Now Available
Disney Launches Sandbox Creation Game 'Disney Infinity: Toy Box" for iPad

Read the whole story
3803 days ago
Not a big deal, really. This doesn't change the main benefit - improving security for the average user by making it easier for people to keep their phone locked.

The only thing I can think of that would be a real problem is if someone figures out how to remotely access the fingerprint data.
Share this story
2 public comments
3804 days ago
I think it would be less trouble just to find out someone's pass code.
Hobart, Tasmania
3804 days ago
And the details. Gonna be hard to get that 2400dpi high resolution image of your fingerprint... but still doable.
Atlanta, GA

Learn AWS With New Self-Paced Labs

1 Comment and 2 Shares

Would you like to test-drive AWS services, acquire some new skills, and gain practical experience working with a wide variety of AWS technologies?

If so, the new AWS self-paced labs will be of great interest to you. We've been working with Cloud vLab (an APN Technology Partner) to create a set of hands-on, self-paced online training labs that run within a live AWS environment. You can choose the topics and products that are of interest to you, and learn at your own pace. Go to run.qwikLAB.com to create your self-paced lab account.

After you create your qwikLab account and log in, you start by choosing a class:

Then you choose one of the labs in the class:

At this point you will need to purchase a token in order to pay for the lab. Each token costs $29.99 and entitles you to run one lab. With that out of the way, the lab will launch an actual AWS environment for you to use:

You will need to copy and save the connection info so that you can log in to the AWS Management Console. Some of the labs will also create the AWS key pair for you:

While the lab is creating the environment, you can download and familiarize yourself with the step-by-step instructions, which are provided in the form of a PDF:

With the environment launched, you simply follow the instructions to complete the lab. The EBS lab contains exercises that use the AWS Management Console and the command line. Here's how I set up my desktop for the lab:

I hope that you enjoy and benefit from the labs! Give one a try and let me know what you think.


Read the whole story
3857 days ago
Share this story
1 public comment
3859 days ago
You private cloud folks can learn how elastic infrastructure is supposed to work!