A group of German hackers claimed to have cracked the iPhone fingerprint scanner on Sunday, just two days after Apple Inc launched the technology that it promises will better protect devices from criminals and snoopers seeking access.
If the claim is verified, it will be embarrassing for Apple which is betting on the scanner to set its smartphone apart from new models of Samsung Electronics Co and others running the Android operating system of Google Inc.
Two prominent iPhone security experts said that they believed the German group, known as the Chaos Computing Club (CCC), had succeeded in defeating Apple’s Touch ID, though they had not personally replicated the work.
One of them, Charlie Miller, co-author of the iOS Hacker’s Handbook, described the work as “a complete break” of Touch ID security.
“It certainly opens up a new possibility for attackers,” he said.
Apple representatives did not respond to requests for comment.
CCC, one the world’s largest and most respected hacking groups, posted a video on its Web site that appeared to show somebody accessing an iPhone 5S with a fabricated print. The site described how members of its biometrics team had cracked the new fingerprint reader, one of the few major high-tech features added to the latest version of the iPhone.
The group said they targeted Touch ID to knock down reports about its “marvels,” which suggested it would be difficult to crack.
“Fingerprints should not be used to secure anything. You leave them everywhere, and it is far too easy to make fake fingers out of lifted prints,” a hacker named Starbug was quoted as saying on the CCC’s site.
The group said it defeated Touch ID by photographing the fingerprint of an iPhone’s user, then printing it on to a transparent sheet, which it used to create a mold for a “fake finger.”
CCC said similar processes have been used to crack “the vast majority” of fingerprint sensors on the market.
“I think it’s legit,” said Dino Dai Zovi,” another co-author of the iOS Hacker’s Handbook. “The CCC doesn’t fool around or over-hype, especially when they are trying to make a political point.”
Touch ID, which was only introduced on the top-of-the-line iPhone 5S, lets users unlock their devices or make purchases on iTunes by simply pressing their finger on the home button. It uses a sapphire crystal sensor embedded in the button.
Data used for verification is encrypted and stored in a secure enclave of the phone’s A7 processor chip.
Two security experts who sponsored an impromptu competition offering cash and other prizes to the first hackers who cracked the iPhone said they had reviewed the information posted on the CCC Web site, but wanted more documentation.
“We are simply awaiting a full video documentation and walk through of the process that they have claimed,” said mobile security researcher Nick DePetrillo, who started the contest with another security expert, Robert Graham. “When they deliver that video we will review it.”
The two of them each put up US$100 toward a prize for the contest winner, then set up a Web site inviting others to contribute. While the booty now includes more than US$13,000 in cash, it was not clear that the CCC would receive the full payout, even if DePetrillo and Graham declared them winners.
A micro venture capital firm known as I/O Capital, which had offered to pay US$10,000 of the prize money, issued a press release late on Sunday saying that it would make its own determination about who won the contest.
ISSUES: Gogoro has been struggling with ballooning losses and was recently embroiled in alleged subsidy fraud, using Chinese-made components instead of locally made parts Gogoro Inc (睿能創意), the nation’s biggest electric scooter maker, yesterday said that its chairman and CEO Horace Luke (陸學森) has resigned amid chronic losses and probes into the company’s alleged involvement in subsidy fraud. The board of directors nominated Reuntex Group (潤泰集團) general counsel Tamon Tseng (曾夢達) as the company’s new chairman, Gogoro said in a statement. Ruentex is Gogoro’s biggest stakeholder. Gogoro Taiwan general manager Henry Chiang (姜家煒) is to serve as acting CEO during the interim period, the statement said. Luke’s departure came as a bombshell yesterday. As a company founder, he has played a key role in pushing for the
China has claimed a breakthrough in developing homegrown chipmaking equipment, an important step in overcoming US sanctions designed to thwart Beijing’s semiconductor goals. State-linked organizations are advised to use a new laser-based immersion lithography machine with a resolution of 65 nanometers or better, the Chinese Ministry of Industry and Information Technology (MIIT) said in an announcement this month. Although the note does not specify the supplier, the spec marks a significant step up from the previous most advanced indigenous equipment — developed by Shanghai Micro Electronics Equipment Group Co (SMEE, 上海微電子) — which stood at about 90 nanometers. MIIT’s claimed advances last
CROSS-STRAIT TENSIONS: The US company could switch orders from TSMC to alternative suppliers, but that would lower chip quality, CEO Jensen Huang said Nvidia Corp CEO Jensen Huang (黃仁勳), whose products have become the hottest commodity in the technology world, on Wednesday said that the scramble for a limited amount of supply has frustrated some customers and raised tensions. “The demand on it is so great, and everyone wants to be first and everyone wants to be most,” he told the audience at a Goldman Sachs Group Inc technology conference in San Francisco. “We probably have more emotional customers today. Deservedly so. It’s tense. We’re trying to do the best we can.” Huang’s company is experiencing strong demand for its latest generation of chips, called
GLOBAL ECONOMY: Policymakers have a choice of a small 25 basis-point cut or a bold cut of 50 basis points, which would help the labor market, but might reignite inflation The US Federal Reserve is gearing up to announce its first interest rate cut in more than four years on Wednesday, with policymakers expected to debate how big a move to make less than two months before the US presidential election. Senior officials at the US central bank including Fed Chairman Jerome Powell have in recent weeks indicated that a rate cut is coming this month, as inflation eases toward the bank’s long-term target of two percent, and the labor market continues to cool. The Fed, which has a dual mandate from the US Congress to act independently to ensure