How Google Glass and smartphones can decipher your PIN code from across the room – even if your screen is facing away
Researchers were able to decipher PIN codes recorded from 10 feet away
Security researchers from the US have shown that gadgets such as Google Glass can be used to covertly record PIN codes from distances of 10 feet – even if the target display is hidden from view.
Wired reports that the research team led by Professor Xinwen Fu of the University of Massachusetts Lowell used software that analysed the shadows and movements of peoples’ fingers in order to decipher PIN codes entered into tablets and smartphones.
A range of devices were tested including Google Glass (which recently went on sale in the UK), an iPhone 5, a Samsung smartwatch and a Logitech webcam. Video captured by Glass produced a correct four digit PIN from three metres away with 83 per cent accuracy (this was improved to more than 90 per cent with manual corrections) while the webcam was accurate 92 per cent of the time.
Similar software has been created in the past (including an iOS app) but this is the first instance of technology that can decipher PINS even when the display is unreadable. Fu explains that it does this by creating a reference image of the iPad’s screen and mapping the target’s finger movements onto this.
A diagram from the team showing their software being used with a high-definition camcorder. Credit: Cyber Forensics Laboratory at University of Massachusetts Lowell
“Any camera works, but you can’t hold your iPhone over someone to do this,” Fu told Wired magazine. “Because Glass is on your head, it’s perfect for this kind of sneaky attack.”
In response to the research Google issued a statement saying: “Unfortunately, stealing passwords by watching people as they type them is nothing new. We designed Glass with privacy in mind. The fact that Glass is worn above the eyes and the screen lights up whenever it’s activated clearly signals it’s in use and makes it a fairly lousy surveillance device.”
Video: Privacy concerns over Google Glass
The research team were also able to record PIN codes using the same software from a distance of nearly 150 feet by using a more expensive camcorder with an optical zoom. With this high resolution equipment they were able to capture a target’s PIN from a fourth storey window on the other side of the road.
Thankfully, there is a solution to this problem: apps and add-ons that randomize the PIN entry pad’s layout. If the software doesn’t know which layout is being used then it can’t work out which buttons are being pressed. Fu and his team have even created such an add-on which they hope to release for Android devices in August as the Privacy Enhancing Keyboard or PEK.
“You can’t prevent people from taking videos,” Fu told Wired. “But for the research community, we need to think about how we design our authentication in a better way.”
Life & Style blogs
Google Maps hides image of Android robot urinating on Apple in surprisingly insolent Easter egg
KickassTorrents down: new Isle of Man domain taken offline just hours after launch
Company breaks open Apple Watch to discover what it says is 'planned obsolescence'
The confessions of men who ordered mail-order brides
What do the emoji on Snapchat mean?
General Election 2015: Chuka Umunna on the benefits of immigration, humility – and his leader Ed Miliband
The sickening truth about food banks that the Tories don't want you to know
Migrant boat disaster: Ukip candidate mocks victims in sickening Twitter post
Nigel Farage wants the BBC to stop making programmes like Doctor Who, Strictly Come Dancing, and Top Gear
Global warming: Scientists say temperatures could rise by 6C by 2100 and call for action ahead of UN meeting in Paris
General Election 2015: Britain would become a 'communist dictatorship' under Ed Miliband and Nicola Sturgeon, claims wife of Michael Gove
- 1 I've been called an abusive and dangerous parent, when all I did was listen to my transgender child
- 2 Migrant crisis: Greek soldier saved 20 people singlehandedly off Rhodes beach
- 3 Sofyen Belamouadden murder: The inside story of a crime that horrified Britain
- 4 Company breaks open Apple Watch to discover what it says is 'planned obsolescence'
- 5 UK weather: Britain braced for snow to replace sun as arctic air mass moves in
iJobs Gadgets & Tech
£18000 - £20000 per annum: Recruitment Genius: This design and print company a...
£30000 - £32000 per annum + £4200 car allowance: Ashdown Group: 3rd Line Suppo...
£70000 - £90000 per annum + bonus + car allowance + benefits: Ashdown Group: H...
£28000 - £32000 per annum + Excellent benefits: Ashdown Group: Application Sup...