Apple's fingerprint sensor on new iPhones successfully hacked days after going on sale

Germany's Chaos Computer Club warns that Touch ID is not safe, showing in a video how prints lifted from a glass bottle can fool Apple's biometrics

A group of German hackers known as the Chaos Computer Club (CCC) have successfully cracked Touch ID, the fingerprint sensor used to secure Apple’s new iPhone 5s. The hack was announced just two days after the smartphone went on sale.

In a post on their blog, the Chaos Computer Club provided details (including a video above) of their method. “A fingerprint of the phone user, photographed from a glass surface, was enough to create a fake finger that could unlock an iPhone 5s secured with Touch ID.”

The news will be worrying to businesses that may have hoped to secure company phones using Apple’s new technology, but will be of little surprise to the online security community, who have been sceptical about Touch ID since its introduction.

"In reality, Apple's sensor has just a higher resolution compared to the sensors so far. So we only needed to ramp up the resolution of our fake,” said a Computer Club hacker known as Starbug. "As we have said now for more than years, fingerprints should not be used to secure anything. You leave them everywhere, and it is far too easy to make fake fingers out of lifted prints."

The technique used by the CCC have been known for years and can fool nearly all fingerprint sensors, but the group did not access the copy of the print stored by the iPhone itself.

Apple’s own website describes individuals’ fingerprints as “one of the best passcodes in the world. It's always with you, and no two are exactly alike”, noting that the Touch ID system can be used to “approve purchases from the iTunes Store, the App Store and the iBooks Store”.

The method used to crack Touch ID has been detailed by the Chaos Computer Club on their website, with the process beginning by finding a fingerprint left on an object like a glass bottle. The fingerprints are made mostly comprised of fat residue and sweat and can be highlighted by sprinkling surfaces with coloured powders.

Cyanoacrylat (“the main ingredient of superglue”) is then applied to the print to sharpen its outlines. This is photographed at a 2400dpi resolution, imported into a computer, cleaned up with imaging software and then printed out at 1200dpi resolution onto a transparent sheet. Woodglue or latex is then smeared on the print to create a duplicate and left to dry. This can then be used to gain access to the iPhone 5s.

Frank Rieger, spokesperson of the CCC, said “We hope that this finally puts to rest the illusions people have about fingerprint biometrics. It is plain stupid to use something that you can't change and that you leave everywhere every day as a security token.”

Although the CCC has successfully tricked the Touch ID sensor, their hack did not retrieve

A pair of security experts who set up a competition with a crowdsourced cash reward for the first individuals to hack Touch ID have said they are awaiting further information before confirming the method.

"We are simply awaiting a full video documentation and walk through of the process that they have claimed," Nick DePetrillo, a mobile security researcher told Reuters, "When they deliver that video we will review it."

Apple has yet to respond with comment.

PROMOTED VIDEO
Life and Style
ebooksA superb mix of recipes serving up the freshest of local produce in a delicious range of styles
Life and Style
ebooksFrom the lifespan of a slug to the distance to the Sun: answers to 500 questions from readers
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Sales Consultant – Permanent – West Sussex – £24-£25k plus commission and other benefits

    £24000 - £25000 Per Annum plus company car and commission: Clearwater People S...

    Marketing Account Manager / Client Liaison Manager

    £25 - 32k DOE: Guru Careers: A digital-savvy Marketing Account Manager / Clien...

    Business Development Manager / Sales Executive

    £23-30k (DOE) + Bonus: Guru Careers: We are seeking bright Business Developmen...

    Inside Sales Manager – SaaS based solutions

    25-30k + Comms + Benefits: Sphere Digital Recruitment: A rapidly expanding tag...

    Day In a Page

    Isis in Syria: A general reveals the lack of communication with the US - and his country's awkward relationship with their allies-by-default

    A Syrian general speaks

    A senior officer of Bashar al-Assad’s regime talks to Robert Fisk about his army’s brutal struggle with Isis, in a dirty war whose challenges include widespread atrocities
    ‘A bit of a shock...’ Cambridge economist with Glasgow roots becomes Zambia’s acting President

    ‘A bit of a shock...’ Economist with Glasgow roots becomes Zambia’s acting President

    Guy Scott's predecessor, Michael Sata, died in a London hospital this week after a lengthy illness
    Fall of the Berlin Wall: History catches up with Erich Honecker - the East German leader who praised the Iron Curtain and claimed it prevented a Third World War

    Fall of the Berlin Wall

    History catches up with Erich Honecker - the East German leader who praised the Iron Curtain and claimed it prevented a Third World War
    How to turn your mobile phone into easy money

    Turn your mobile phone into easy money

    There are 90 million unused mobiles in the UK, which would be worth £7bn if we cashed them in, says David Crookes
    Independent writers remember their Saturday jobs:

    Independent writers remember their Saturday jobs

    "I have never regarded anything I have done in "the media" as a proper job"
    Lyricist Richard Thomas shares his 11-step recipe for creating a hit West End musical

    11-step recipe for creating a West End hit

    Richard Thomas, the lyricist behind the Jerry Springer and Anna Nicole Smith operas, explains how Bob Dylan, 'Breaking Bad' and even Noam Chomsky inspired his songbook for the new musical 'Made in Dagenham'
    Tonke Dragt's The Letter for the King has finally been translated into English ... 50 years on

    Buried treasure: The Letter for the King

    The coming-of-age tale about a boy and his mission to save a mythical kingdom has sold a million copies since it was written by an eccentric Dutchwoman in 1962. Yet until last year, no one had read it in English
    Can instilling a sense of entrepreneurship in pupils have a positive effect on their learning?

    The school that means business

    Richard Garner heads to Lancashire, where developing the 'dragons' of the future is also helping one community academy to achieve its educational goals
    10 best tablets

    The world in your pocket: 10 best tablets

    They’re thin, they’re light, you can use them for work on the move or keeping entertained
    Lutz Pfannenstiel: The goalkeeper who gave up Bayern Munich for the Crazy Gang, Bradford and a whirlwind trawl across continents

    Lutz Pfannenstiel interview

    The goalkeeper who gave up Bayern Munich for the Crazy Gang, Bradford and a whirlwind trawl across continents
    Pete Jenson: Popular Jürgen Klopp can reignite Borussia Dortmund’s season with visit to Bayern Munich

    Pete Jenson's a Different League

    Popular Klopp can reignite Dortmund’s season with visit to Bayern
    John Cantlie video proves that Isis expects victory in Kobani

    Cantlie video proves that Isis expects victory in Kobani

    The use of the British hostage demonstrates once again the militants' skill and originality in conducting a propaganda war, says Patrick Cockburn
    The killer instinct: The man who helps students spot potential murderers

    The killer instinct

    Phil Chalmers travels the US warning students how to spot possible future murderers, but can his contentious methods really stop the bloodshed?
    Clothing the gap: A new exhibition celebrates women who stood apart from the fashion herd

    Clothing the gap

    A new exhibition celebrates women who stood apart from the fashion herd
    Fall of the Berlin Wall: Goodbye to all that - the lost world beyond the Iron Curtain

    The Fall of the Berlin Wall

    Goodbye to all that - the lost world beyond the Iron Curtain