Tech News

Biometrics Can Be Hacked Like Passwords

Biometrics Can Be Hacked Like Passwords

biometrics can be hacked tech 2015We see in the movies how fingerprints get bypassed by both spies and thieves by extracting them from somewhere touched by their target. That suggests that fingerprints aren’t easily hacked as passwords. I also wrote earlier that fingerprints and other biometric technologies are the new thing in security in this dark period of left and right password hacking. That for the meantime, hackers will have a difficult time brute forcing or guessing their way into secured systems. Apple began using fingerprint technology upon the release of the iPhone 5S. Samsung followed suit on the Galaxy S5 and Windows 10 is set to use biometrics through its Windows Hello technology. However, it seems that meantime is actually quite short.

The problem is actually not in the biometric methods themselves but on how they’re implemented. It’s always the human element. Some Android phone manufacturers apparently took the security out of the phrase biometric security by storing fingerprint data in a way that they could easily be accessed. This is very bad juju for people who use their phones or tablets to do transactions on the internet and use their fingerprints for authentication.

apple biometrics already hacked 2015 images techOne of these manufacturers, HTC was found guilty of storing raw, world readable fingerprint data in an easily accessible folder within the system, specifically, the HTC One Max phone. Whether this was an oversight of the struggling phone manufacturer or plain laziness remains to be seen. More minus points for HTC. What people using their products can expect though, is that malware designed to harness such a vulnerability can easily harvest fingerprint data as easy as thieves can get fingerprints off a used wine glass. HTC isn’t alone in the unsecure fingerprint department. Samsung and other Android manufacturers are guilty in not fully taking advantage of ARM’s Trustzone technology according to security firm FireEye. FireEye also states that Android itself isn’t secure and the fingerprint technology can be accessed through already known exploits. This is made easier since manufacturers take their time in updating their devices.

This is a real shame, as it turns out in Android land, fingerprint scanning is more of a novelty. Reports have yet to come from Apple and Microsoft’s sides of the fence. Implemented correctly though, one still can’t dismiss the potential of biometrics as a faster and easier way of authentication and security. For now, what’s a user to do? Users can still go back to the tried and true passcode method. Biometrics registration isn’t mandatory for online services yet. For unlocking personal devices like phones, tablets and laptops, biometrics are great, secure and convenient as long as there’s no online way to access the biometric signatures. Here’s to hoping the technology matures because remembering passwords, especially the alphanumeric-symbolic-case-mixed-type is really a chore.

Click to add a comment
Tech News

Our technology expert who knows a thing or two about the future, superheroes and Supernatural.

More in Tech News

apple vs qualcomm $1b patent fight lawsuit 2017 images

Apple vs Qualcomm in $1 billion patent fight lawsuit

Jeffrey LangJanuary 21, 2017
net neutrality donald trump eyes ajit pai for fcc 2017 images

Net Neutrality: Donald Trump eyes Ajit Pai for FCC

MTTG StaffJanuary 21, 2017
gaming weekly scalebound dead final fantasy 15 plus nintendo switch 2017 images

Gaming Weekly: Scalebound dead, Final Fantasy 15 plus Nintendo Switch

Max SmithJanuary 19, 2017
forward heathcare apple store meets doctors office 2017 images

Forward healthcare solution: Apple Store meets doctors office

Jeffrey LangJanuary 17, 2017
gaming weekly injustice 2, andromeda releases plus unchartered 4 2017 images

Gaming Weekly: ‘Injustice 2,’ ‘Andromeda’ releases plus ‘Unchartered 4’

Max SmithJanuary 15, 2017
gaming weekly assassins creed bombs and devils third closes 2017 images

Gaming Weekly: ‘Assassin’s Creed’ bombs and ‘Devil’s Third’ closes

Curt JohnsonJanuary 15, 2017
smart health sensors coming next 2017 images

Smart health sensors coming next

Jackie WarnerJanuary 14, 2017
facebook gets serious with journalism project 2017 images

Facebook gets serious with ‘Journalism Project’

Jeffrey LangJanuary 13, 2017
nintendo switch debut gets gamers excited for march 2017 images

Nintendo Switch debut gets gamers excited for March

Jeffrey LangJanuary 13, 2017

Subscribe to our Daily Newsletter

You will only receive one per day. You'll also get a free THE WALKING DEAD graphic novel with your subscription