Samsung Galaxy S5 fingerprint scanner already hacked (video)

Samsung Galaxy S5 fingerprint scanner already hacked

PanARMENIAN.Net - Samsung’s Galaxy S5 smartphone has already had its fingerprint scanner hacked, as questions remain over the effectiveness of biometrics for device security, V3 reports.

Apple’s iPhone 5S Touch ID tool was hacked within a few weeks of being launched, as the hacker community looks for ways to spoof the system. Now, ethical hackers with Security Research Labs have demonstrated how to beat the Galaxy S5.

In a video posted to YouTube, they show how a print of the fingerprint registered to a device is adequate for unlocking the device.

The researchers also chided Samsung for making it possible to have unlimited attempts to use a fingerprint to log in to the device, rather than requesting a passcode after a certain number of attempts.

“Perhaps most concerning is that Samsung does not seem to have learned from what others have done less poorly," the researcher in the video said. "Not only is it possible to spoof the fingerprint authentication even after the device has been turned off, but the implementation also allows for seemingly unlimited authentication attempts without ever requiring a password."

The Samsung Galaxy S5 hit the market last week. Samsung has touted the fingerprint scanner and the inclusion of its latest Knox Security tools as proof the device is suitable for the business market.

However, the hack of the fingerprint scanner could concern some and suggest that the use of a passcode remains a simpler but more secure method of protection, V3 says.

 Top stories
The attacks appear unrelated to an episode in which hackers stole nude photos from the iCloud accounts of several U.S. celebrities.
"We roughly know who they are. If we can take them out of the equation then the rest will fall down," Troels Oerting said.
Facebook, like Twitter and YouTube, is inaccessible in Iran on the grounds that the sites undermine Islamic values.
The firm said it brought the case in an effort to force the government to be more transparent about personal data requests.
Partner news