More details, new video showing Iphone fingerprint reader pwned by Chaos Computer Club


Starbug, the Chaos Computer Club hacker who broke the fingerprint biometric security on the Iphone, has given an interview [German] to CT Magazine detailing the hack, and released a new video showing how he did it.

In the end it, remove the fingerprint in a realistic usage scenarios directly from an iPhone succeeded. Here, a scanner with 2400 DPI was used. Subsequently, this fingerprint is digitally enhanced in order to print on a transparent film (1200 dpi), which was then used as a mask for exposing a printed circuit board. Protected by the black areas in front of the UV light structures do not harden and can then be etched away. This yields a form that serves as a template for creating artificial fingerprints. This is done by spraying with graphite, which is then applied wood glue is then used as a skin-like support material. The video shows that the iPhone is accepted as the created fingerprint harmless dummy.

None of the methods used is new. About to create the procedure, fingerprint forms with etched circuit boards, Tsutomu Matsumoto in 2002 documented . The equipment and materials used are quite simply accessible for ambitious hobbyists. Thus, the cracking of the fingerprint lock should indeed exceed the capabilities of a conventional pickpocket, a targeted attack by a tech savvy attacker will touch ID but no insurmountable obstacles in the way.


Der iPhone-Fingerabdruck-Hack [Jürgen Schmidt/CT]

The iPhone fingerprint hack [Google Translate]

(Thanks, Alex!)