Samsung’s Galaxy S5 fingerprint scanner hacked, PayPal accounts at risk

“As noted by German-language security blog H Security, SRLabs has posted video evidence that the fingerprint scanner on Samsung’s Galaxy S5 can easily be spoofed using a lifted print,” Zach Epstein reports for BGR. “In mere minutes, the group was able to create a ‘dummy finger’ using an actual fingerprint to gain unauthorized access to the phone.”

“Some might recall that Apple’s iPhone 5s fingerprint scanner was hacked using the same method,” Epstein reports. “As SRLabs points out, however, the Galaxy S5′s fingerprint security implementation makes this hack far more dangerous.”

“With Apple’s Touch ID system, users are required to input their password one time before using a fingerprint for authentication. The password must be used again once each time the device is rebooted. This extra step seems annoying, but it prevents the very spoof achieved by SRLabs,” Epstein reports. “On Samsung’s Galaxy S5 however, no password is needed to access the device. Even after a reboot, a simple swipe of a finger will unlock the phone. And what could be much more alarming is the fact that, even after a reboot, users don’t need a password to access PayPal and make payments through the app if it has been configured for fingerprint authentication.”

Read more in the full article here.

MacDailyNews Take: Silly half-assed imitators. Smirk.

[Thanks to MacDailyNews Readers “Fred Mertz” and “Bill” for the heads up.]

Related articles:
Apple’s iPhone 5s Touch ID vs. Samsung’s Galaxy S5 fingerprint scanner (with video) – April 4, 2014
Ars Technica: Apple’s Touch ID and 64-bit A7 are deceptively large advances in the iPhone’s evolution – September 24, 2013
Security researcher: Apple iPhone 5s Touch ID is truly better security – September 19, 2013
iPhone 5s Touch ID iPhone fingerprint scanner earns praise – September 19, 2013
Apple’s Touch ID is revolutionary, paradigm-altering technology; Steve Jobs would be quite proud – September 17, 2013
iPhone 5s: Once again Apple leaps ahead with Touch ID fingerprint recognition; a big enterprise win for Apple – September 10, 2013
Apple reveals flagship iPhone 5s with Touch ID, the world’s first and only 64-bit smartphone – September 10, 2013

24 Comments

  1. Not an issue to Samsung as they likely will comfort themselves that users have agreed to their legal terms and so won’t be sued although will be doomed 🙂

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.