News
Insane: $15 gear can bypass Samsung Galaxy’s fingerprint protection
Knox security solution recently turned 10 and Samsung announced the Knox Matrix for future Galaxy devices. Meanwhile, researchers from Tencent Security Xuanwu Lab and Zhejiang University proposed a new attack called “BrutePrint,” which can bypass your Samsung phone’s fingerprint protection.
The aforementioned researchers exploited two zero-day vulnerabilities, Cancel-After-Match-Fail (CAMF) and Match-After-Lock (MAL), and discovered biometric data on the serial peripheral interface (SPI) of the fingerprint sensor was not adequately protected.
Follow our socials → Google News, Telegram, Twitter, Facebook
They are allowing a man-in-the-middle (MITM) attack to hijack the fingerprint image and thus crack the phone’s fingerprint. Usually, brute-force attacks rely on multiple trials and errors to crack codes, keys, or passwords and gain unauthorized access to accounts, systems, or networks.
In the paper published on Arxiv.org (via BleepingComputer), the researchers tested ten common smartphones, achieving an unlimited number of attempts to crack fingerprints on all Android and HarmonyOS devices, and ten additional attempts on iOS devices.
The doc suggests that the idea of the BrutePrint attack is to perform an infinite number of fingerprint image submissions to the target device until a user-defined fingerprint is matched. Attackers need to have physical access to the target device to launch a BrutePrint attack.
Access to a fingerprint database that can be obtained from academic datasets or biometric data leaks requires a cost of about $15 device Besides, the researchers successfully bypassed the limit on the number of unlocking fingerprints through the MAL zero-day vulnerability.
Resulting in, there can be unlimited attempts to unlock on Android phones, and through the “neural style transfer” system, all fingerprint images in the database are converted. Probably, the target device’s sensor scans the image, so it can keep getting closer to the correct fingerprint.
The researchers used 10 devices for cracking tests, including 6 Android phones, 2 HarmonyOS phones, and 2 Apple iPhones. Tests have shown that all devices have at least one flaw, and that Android and HarmonyOS devices can be brute-forced an unlimited number of times.
Google Messages is getting a new look for its voice recorder UI. The microphone icon in the text field will change to a waveform icon, which is different from the voice typing button in Gboard.
Instead of holding down the mic to record, you will now see a panel with a start/stop button and options to cancel, delete, or attach the recording. You will also see a waveform and a timer while recording, and you can play back the recording before sending it.
The voice messages preview will also show a waveform between the play/pause button and the timer, making it more noticeable than the current straight line.
These changes are not widely available yet, but some users have reported seeing them on their phones. These new changes are part of a bigger redesign that Google is working on for Messages, which includes a revamped home screen that is still in beta testing. Google might announce new features soon.
Samsung managed to create an ecosystem of FE products, which are not too far from launch. In October, Samsung is likely to announce the Galaxy S23 FE, Galaxy Buds FE and Galaxy Tab S9 FE series. Meanwhile, a tipster just leaked the official promotional material of these upcoming devices.
Well-known tipster Evleaks posted several official promotional images of Samsung’s upcoming devices including the Galaxy S23 FE, Galaxy Buds FE, and Galaxy Tab S9 FE. These devices are inspired by the company’s top-line products and will be available at affordable prices.
Follow our socials → Google News, Telegram, X (formerly Twitter), Facebook
Notably, a leaked promo shows off the control center of the Galaxy S23 FE, which mentions October 4 as the date. This means the company is preparing to hold its FE products launch on the same date as Google’s Made by Google event for Pixel 8 series.
— Evan Blass (@evleaks) September 22, 2023
— Evan Blass (@evleaks) September 22, 2023
Samsung’s top-of-the-line Galaxy S23 series offers the most advanced camera, next-level gaming performance, and more eco-conscious design. Meanwhile, the Galaxy Watch 4 inspires you on a better health journey with personalized fitness insights and wellness features.
Together, the flagship smartphone and watch ecosystem empower users to live a hyper-connected lifestyle. In Malaysia, Samsung is rewarding customers who purchase the Galaxy S23 series until 9 October 2023 with the Galaxy Watch 4 40mm, worth RM799.
Follow our socials → Google News, Telegram, X (formerly Twitter), Facebook
Galaxy fans begin a hyper-connected lifestyle with the Galaxy Watch 4 when they buy the Galaxy S23 series. The promo is applicable at Samsung Malaysia Online Stores, Samsung Experience Stores, and Samsung Authorised Dealers.
Models RPP (RM) – Promo Gift: Galaxy Watch 4
- Galaxy S23 128GB 3,899
- Galaxy S23 256GB 4,199
- Galaxy S23+ 256GB 4,699
- Galaxy S23+ 512GB 5,199
- Galaxy S23 Ultra 256GB 5,699
- Galaxy S23 Ultra 512GB 6,199
- Galaxy S23 Ultra 1TB 7,199
Win a trip to Korea
Once you’ve bought your Galaxy S23, join Samsung’s ‘Go the S-Tra Mile’ competition and snap photos and videos of Malaysia’s hidden gems until 15 October 2023. Six participants with the most creative and rare submissions will win the ultimate photography trip to Busan.