Concordski & Buran

by Volker Weber

Whether it's a Concordski or a Buran, you often find inventions that look familiar. So when Apple made the iPhone 5S with a fingerprint reader on its home button, similar designs appeared in Android land. Since there is always a great rush to implement those designs, sometimes engineers have to cut corners. HTC seems to have forgotten to copy the design that Apple chose to protect user's fingerprints for its HTC One Max phablet and just stored the fingerprints in the file system, world readable by any process.

Interesting research paper:

In this talk, we revealed some severe issues with the current Android fingerprint frameworks that have long been neglected by vendors and users. We provided in-depth security analysis of the popular mobile fingerprint authentication/authorization frameworks, and discussed the security problems of existing designs

More >

Comments

Recent comments

Andreas Braukmann on Sonos Play:3 :: Nicht kaufen, nicht warten at 00:30
Volker Weber on Themenwechsel at 23:40
Volker Weber on Sonos Play:3 :: Nicht kaufen, nicht warten at 23:13
Karl Heindel on Themenwechsel at 23:12
Volker Weber on Apple Music :: Erfolgreicher Umstieg at 21:51
Marco Foellmer on Apple Music :: Erfolgreicher Umstieg at 21:42
Frank Heurich on Sonos Play:3 :: Nicht kaufen, nicht warten at 21:07
Volker Weber on Sonos Play:3 :: Nicht kaufen, nicht warten at 20:16
Volker Weber on Apple Music :: Erfolgreicher Umstieg at 20:14
Michael Jäckel on Apple Music :: Erfolgreicher Umstieg at 20:06
Felix Binsack on Sonos Play:3 :: Nicht kaufen, nicht warten at 18:46
Volker Weber on Apple Music :: Erfolgreicher Umstieg at 16:25
Volker Weber on Sonos Play:3 :: Nicht kaufen, nicht warten at 15:01
Dirk Steins on Sonos Play:3 :: Nicht kaufen, nicht warten at 14:19
Michael Jäckel on Apple Music :: Erfolgreicher Umstieg at 13:50
Axel Borschbach on Apple Music :: Erfolgreicher Umstieg at 11:29
Jens Nullmeyer on Apple Music :: Erfolgreicher Umstieg at 11:18
Volker Weber on Themenwechsel at 10:59
Timm Caspari on Themenwechsel at 10:54
Hanjo Iwanowitsch on Don't lie to me at 23:01
Volker Weber on Maybe phones have gone too far :: Genius review of the Google Pixel 3 at 19:45
Nick Daisley on Maybe phones have gone too far :: Genius review of the Google Pixel 3 at 19:29
Martin Kautz on Reverse engineering a Huawei phone at 19:11
Henning Heinz on Don't lie to me at 19:10
Volker Weber on Reverse engineering a Huawei phone at 18:18

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter  amazon

Local time is 05:00

visitors.gif

buy me coffee