Fingerprint scanner in the Samsung Galaxy S5 is also vulnerable
All gadzhetomany remember the history of hacking biometric protection iPhone 5S, the successful implementation of which was conducted by the German team of biometric hackers Chaos Computer Club (CCC). Less than a week ago, Samsung released an updated version of its flagship, the novelty was called the Samsung Galaxy S5 and also has a biometric fingerprint scanner. In addition, unlike the Apple device, the S5 supports the use of the sensor in third-party applications. So, the first authorized application was PayPal mobile wallet, in which you can confirm payments and transfers using fingerprint authorization.
The skeptical CCC group has repeatedly stated that all currently existing (2007) fingerprint scanning technologies are vulnerable and can be easily deceived by ingenuity and household tools. ')
The fingerprint scanner in SGS5 is no exception. The SRLabs team, who also previously focused on fingerprint authorization problems , this time did not even have to invent fundamentally new techniques - the old ready-made PVC molds left after experiments with the 5S scanner work fine on the SGS5 scanner ( see video ).
Due to the fact that the Samsung device does not provide an explicit password request after N unsuccessful attempts to scan a finger, the attacker has every chance and unlimited time to experiment with the mold and your wallet. The company's plans to introduce this type of authorization into various payment applications can make this sensor a real hole in your pocket.