Security researcher: Thieves may chop off iPhone 5s owners’ fingertips to gain access

“Thieves have mutilated victims to gain access to phones equipped with a fingerprint reader, an expert has warned,” Katie Hodge reports for The Independent.

On Tuesday, “Apple launched its iPhone 5S, which includes the Touch ID feature, an integrated sensor on the device’s home button that reads your fingerprint in order to unlock your phone,” Hodge reports. “Marc Rogers said the sensors can provide a convenient way to unlock gadgets while also boosting security.”

Hodge reports, “But they have led criminals to commit increasingly brutal robberies and even chop off phone-owners’ fingertips, the chief researcher at mobile security firm Lookout claimed. ‘Thieves in some regions have worked out that you can force a victim to unlock a secured device, and in some extreme cases have also mutilated victims in order to steal their fingerprint.'”

Read more in the full article here.

MacDailyNews Take: FUDtastic!

(We were waiting for this one. We’re surprised the good ol’ amputation threat FUD took this long.)

Related articles:
Apple’s iPhone 5S with biometric identification: Big Brother’s dream? – September 11, 2013
iPhone 5s: Once again Apple leaps ahead with Touch ID fingerprint recognition; a big enterprise win for Apple – September 10, 2013
Apple reveals flagship iPhone 5s with Touch ID, the world’s first and only 64-bit smartphone – September 10, 2013

87 Comments

      1. Its worse than that: the phrasing infers that there’s already been victims from a yet-to-be-released product:

        ““But they have led criminals to… chop off phone-owners’ fingertips…”

        But okay, I’ll play dumb: since the iPhone 5S hasn’t shipped, exactly what cellphones have already been released with fingerprint readers? And where were are these police reports of said alleged crimes filed?

        -hh

      1. Yes, let’s play the game where we make basic daily life decisions based on how extreme we can get in underestimating or overestimating the intelligence of the common thief.

        Do you think all thieves are smart enough to know you do not have a few million in cash stashed in the trunk of your car? Do you commute on horseback just in case?

    1. … if properly warmed and moistened. Of course, even THAT offers a limited life-span for use of the stolen device. Then there’s the question of selling the stolen technology … you going to hand over the increasingly desiccated finger with the “used” iPhone?
      Science Fiction had this answer decades ago. 😉

    1. Seriously BLN ? Have you actually got ios7 or are just going by screenshots. I was a bit err, umm about the design themes but in the flesh it’s a lot nicer. I was given the last iteration by a friend and after a day or so I was so used to it that iOS6 now looks old.

      Normally I look forward to your comments but wait until it ships before condemning it. 9

      BTW, as for your other hobyhorse, bigger screens, I suggest looking to the iPhone 6 in the near future ( I’m guessing April )

      1. Grizz, in actuality, a small minority of people prefer the oversized phone to a more convenient form factor.
        The primary market for the bigboy phones is the newly middle aged (that are still in denial about their stage in life and newly acquired ocular disfunction and wearing glasses to correct that) but they don’t make enough of a market slice. So I guess the watchword is if you want to pretend that you aren’t getting older and can still see like you did at 25 buy a ‘roid bigboy phone, because it’s is unlikely apple is going to produce one (so you wait with all the people expecting apple to make a “big box” form factor of the Mac Mini, but it just ‘aint likely to happen)
        The android phones are big not because they want to be, but rather because they have to be. Android is not particularly efficient and so needs big batteries to have decent runtime (until they went oversized androids had dismal runtimes and most users would disable 3G, wifi, bluetooth, etc. to attempt to get a average days use out of the phone)

        1. You can’t take the specific (what you want) and extrapolate that to a general case.

          The real world data just doesn’t back up your preference (nor BLN’s.) Most (the vast majority) of people choose the compact form factor (like the iPhone) over the oversized screen screen phones. It just isn’t a problem, for most people, to see the screen.

    2. nope – the eyeball gouging will come in 5 years when AAPL puts in the retina scans as a security feature

      but seriously, how did a clown from The Independent beat out The Onion on a scoop like this?

    3. yo left nut – did some one cut off you right nut and therefore make you into a total lame ass – or were you just born a lame ass – ha

      by the way everyone – Ballmer’s left nut – is a troll – have at him!

  1. Or one could simply threaten (and subsequently proceed) to chop off a user’s fingers (or arm, toe, foot, etc – pick one) unless he/she reveals his/her password.

    The writers’s point being…?

    FUD, indeed.

      1. “… you have completely ignored half of the population.”

        They’d have to make the whole screen a reader if it could be used on a pussy. Have you ever actually seen one; I mean in person?

        1. You just told a poster what to say and how to behave.

          Possible rules are
          – NO-ONE should tell others how to behave — which would then apply to your post, so your post is ridiculous.
          – EVERYONE can tell others how to behave — in which case your post is ridiculous.

      2. There’s nothing crass or vulgar about the word “penis” or that comment. Maybe it is in the church you obviously frequent too often.
        So besides being ignorant and a prude, you can’t take what is obviously a joke !

        1. So, you are at a business meeting and your phone rings . . . Although it might seem funny, it would be crass and vulgar to use the ‘funny’ method of verification previously described.

          We can aspire to higher minded humor than second grade school potty ‘jokes’.

        2. OMFG. You’re taking that comment way too seriously.You think he REALLY meant it ? Yeah whipping it out in public would be rude, but FCOL its not he same thing at all as making a joke about a penis reader. Aspire to whatever you want. Humor is subjective but at least try to realize when its a joke and when someone REALLY means it.

  2. Won’t be an issue as I’m going to chop off my fingers first as a means of preventing such brutality and detriment to iPhone theft and gaining access to my all important address book contacts, etc.

  3. Yet another way in which Apple is doomed. How happy must the lesser gods be—you know, the ones who contemptuously shape public opinion through the adroit manipulation of misinformation. May they rot in Hell.

  4. What a load of crap.

    Does this guy realtor how hard it is to actually chop a finger off??

    You can’t do it with a knife you have to use a butchers blade to do it.

    I know this as I have a friend who runs a butchers shop.

  5. That’s it… I’ve seen enough stupid comments (mostly at the source of these articles) to know there is a market out there for a key shaped like a finger that you can use instead of your own finger. It’ll come with shark-proof gloves that can help stave off the finger cutters long enough for your SIRI activated announcement that actual fingers were not used to secure your iPhone… Say $99.00. Act now and get another one FREE!

  6. I know this sounds far fetched. But I live in the Chicago area. During a recent convention in town, gangs of teenagers sought people carrying iPhones and iPads, and in broad daylight in the most populated areas, best thrm and stole their devices. In a city with almost daily murders, this awful scenario is going to happen.

    1. Oh puh-lease, you simply hold the phone to their finger and presto you’re in.
      Or, if they have an older iPhone (or god forbid a ‘roid copy of an iPhone (because they were too cheep or too stupid to get the real thing)) just go Tonya Harding on their ass and 99.9% of (sane) people would cough up their password in a nanosecond.

  7. I finally found Marc Rodgers blog.
    https://blog.lookout.com/blog/2013/09/11/lookouts-take-on-fingerprint-passcodes/

    I left this comment:

    “While we can expect the fingerprint scanner in Apple’s latest device to use the most advanced defenses to protect against these types of attack…”

    I think you can do more than expect it. If you read the Authentec patents (now Apple’s patents since they bought Authentec a year ago) and listen to what Apple says, they certainly are using the most advanced defenses. The sensor detects subtle changes in conductivity in the ridges and valleys beneath the outer layer of skin, so lifting a print and making a photocopy just won’t work. Also, making a mold of a finger with biological gel, one would still have to engineer a way to alter the conductivity of the gel to correspond to the ridges and valleys. That would be one tough nut to crack.

    “Now the company will face a second challenge: ensuring that user data is adequately protected on the device itself so that it is secure in the event a device gets stolen.”

    Again, if you listen to point blank statements from Apple, the data is in no way accessible to anyone. Key characteristics of the recorded fingerprint is first encrypted then stored in a region of nonvolatile memory internal to the A7 processor chip. (The fingerprint image is never recorded anywhere.) There is no “read” capability for this region. Once there, all that can be done with it is to submit another fingerprint to the A7 and it’s internal processing will return a match or no-match result. The software for this function is not in RAM or flash, it’s internal to the A7, so the verification code just isn’t available for hacking.

    Now, I read somewhere that quoted you as saying that criminals have already cut off someone’s finger when they stole a phone, to use on its fingerprint reader. Would you mind revealing the source of this info?

    —–
    Betting he doesn’t respond.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.