How Google Glass and smartphones can decipher your PIN code from across the room – even if your screen is facing away

Researchers were able to decipher PIN codes recorded from 10 feet away

Security researchers from the US have shown that gadgets such as Google Glass can be used to covertly record PIN codes from distances of 10 feet – even if the target display is hidden from view.

Wired reports that the research team led by Professor Xinwen Fu of the University of Massachusetts Lowell used software that analysed the shadows and movements of peoples’ fingers in order to decipher PIN codes entered into tablets and smartphones.

A range of devices were tested including Google Glass (which recently went on sale in the UK), an iPhone 5, a Samsung smartwatch and a Logitech webcam. Video captured by Glass produced a correct four digit PIN from three metres away with 83 per cent accuracy (this was improved to more than 90 per cent with manual corrections) while the webcam was accurate 92 per cent of the time.

Similar software has been created in the past (including an iOS app) but this is the first instance of technology that can decipher PINS even when the display is unreadable. Fu explains that it does this by creating a reference image of the iPad’s screen and mapping the target’s finger movements onto this.

A diagram from the team showing their software being used with a high-definition camcorder. Credit: Cyber Forensics Laboratory at University of Massachusetts Lowell

“Any camera works, but you can’t hold your iPhone over someone to do this,” Fu told Wired magazine. “Because Glass is on your head, it’s perfect for this kind of sneaky attack.”

In response to the research Google issued a statement saying: “Unfortunately, stealing passwords by watching people as they type them is nothing new. We designed Glass with privacy in mind. The fact that Glass is worn above the eyes and the screen lights up whenever it’s activated clearly signals it’s in use and makes it a fairly lousy surveillance device.”

Video: Privacy concerns over Google Glass

The research team were also able to record PIN codes using the same software from a distance of nearly 150 feet by using a more expensive camcorder with an optical zoom. With this high resolution equipment they were able to capture a target’s PIN from a fourth storey window on the other side of the road.

Thankfully, there is a solution to this problem: apps and add-ons that randomize the PIN entry pad’s layout. If the software doesn’t know which layout is being used then it can’t work out which buttons are being pressed. Fu and his team have even created such an add-on which they hope to release for Android devices in August as the Privacy Enhancing Keyboard or PEK.

“You can’t prevent people from taking videos,” Fu told Wired. “But for the research community, we need to think about how we design our authentication in a better way.”  

Life and Style
ebookNow available in paperback
ebooks
ebookPart of The Independent’s new eBook series The Great Composers
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Recruitment Genius: Web Developer

    £18000 - £20000 per annum: Recruitment Genius: This design and print company a...

    Ashdown Group: Systems Administrator - Hull - £32,000

    £30000 - £32000 per annum + £4200 car allowance: Ashdown Group: 3rd Line Suppo...

    Ashdown Group: Head of IT - Hertfordshire - £90,000

    £70000 - £90000 per annum + bonus + car allowance + benefits: Ashdown Group: H...

    Ashdown Group: Application Support Analyst - SQL Server, T-SQL

    £28000 - £32000 per annum + Excellent benefits: Ashdown Group: Application Sup...

    Day In a Page

    Not even the 'putrid throat' could stop the Ross Poldark swoon-fest'

    Not even the 'putrid throat' could stop the Ross Poldark swoon-fest'

    How a costume drama became a Sunday night staple
    Miliband promises no stamp duty for first-time buyers as he pushes Tories on housing

    Miliband promises no stamp duty for first-time buyers

    Labour leader pushes Tories on housing
    Aviation history is littered with grand failures - from the the Bristol Brabazon to Concorde - but what went wrong with the SuperJumbo?

    Aviation history is littered with grand failures

    But what went wrong with the SuperJumbo?
    Fear of Putin, Islamists and immigration is giving rise to a new generation of Soviet-style 'iron curtains' right across Europe

    Fortress Europe?

    Fear of Putin, Islamists and immigration is giving rise to a new generation of 'iron curtains'
    Never mind what you're wearing, it's what you're reclining on

    Never mind what you're wearing

    It's what you're reclining on that matters
    General Election 2015: Chuka Umunna on the benefits of immigration, humility – and his leader Ed Miliband

    Chuka Umunna: A virus of racism runs through Ukip

    The shadow business secretary on the benefits of immigration, humility – and his leader Ed Miliband
    Yemen crisis: This exotic war will soon become Europe's problem

    Yemen's exotic war will soon affect Europe

    Terrorism and boatloads of desperate migrants will be the outcome of the Saudi air campaign, says Patrick Cockburn
    Marginal Streets project aims to document voters in the run-up to the General Election

    Marginal Streets project documents voters

    Independent photographers Joseph Fox and Orlando Gili are uploading two portraits of constituents to their website for each day of the campaign
    Game of Thrones: Visit the real-life kingdom of Westeros to see where violent history ends and telly tourism begins

    The real-life kingdom of Westeros

    Is there something a little uncomfortable about Game of Thrones shooting in Northern Ireland?
    How to survive a social-media mauling, by the tough women of Twitter

    How to survive a Twitter mauling

    Mary Beard, Caroline Criado-Perez, Louise Mensch, Bunny La Roche and Courtney Barrasford reveal how to trounce the trolls
    Gallipoli centenary: At dawn, the young remember the young who perished in one of the First World War's bloodiest battles

    At dawn, the young remember the young

    A century ago, soldiers of the Empire – many no more than boys – spilt on to Gallipoli’s beaches. On this 100th Anzac Day, there are personal, poetic tributes to their sacrifice
    Dissent is slowly building against the billions spent on presidential campaigns – even among politicians themselves

    Follow the money as never before

    Dissent is slowly building against the billions spent on presidential campaigns – even among politicians themselves, reports Rupert Cornwell
    Samuel West interview: The actor and director on austerity, unionisation, and not mentioning his famous parents

    Samuel West interview

    The actor and director on austerity, unionisation, and not mentioning his famous parents
    General Election 2015: Imagine if the leading political parties were fashion labels

    Imagine if the leading political parties were fashion labels

    Fashion editor, Alexander Fury, on what the leaders' appearances tell us about them
    Phumzile Mlambo-Ngcuka: Home can be the unsafest place for women

    Phumzile Mlambo-Ngcuka: Home can be the unsafest place for women

    The architect of the HeForShe movement and head of UN Women on the world's failure to combat domestic violence