21 June 2018
Visit www.gemalto.com

Researchers crack Galaxy S5 fingerprint reader and access PayPal app

16 April 2014  |  8797 views  |  0 PayPal Samsung s5

Security researchers from SR Labs have cracked the Samsung Galaxy S5's fingerprint reader, gaining access to the handset and using it to make PayPal transactions.

Repeating a trick it pulled on the Apple 5s last year, SR Labs used a camera phone image of a latent print taken from a handset screen to create a mould from wood glue which could fool the S5's scanner.

Once inside the phone, the researchers also managed to use the same technique to access the PayPal app - which uses the fingerprint scanner instead of passwords to authenticate users - and wire money from an account.



SR Labs admits that the spoof was made under lab conditions but says that it should still worry Samsung and its customers, particularly because the handset allows would-be crooks to have as as many attempted swipes as necessary.

However, PayPal has played down the threat, issuing a statement saying: "PayPal never stores or even has access to your actual fingerprint with authentication on the Galaxy S5. The scan unlocks a secure cryptographic key that serves as a password replacement for the phone. We can simply deactivate the key from a lost or stolen device, and you can create a new one."
KeywordsBIOMETRICS

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Westpac tests fingerprint scanning for mobile banking login

Westpac tests fingerprint scanning for mobile banking login

14 April 2014  |  10530 views  |  8 comments | 17 tweets | 14 linkedin
Samsung and PayPal team to let Galaxy S5 owners pay by fingerprint

Samsung and PayPal team to let Galaxy S5 owners pay by fingerprint

25 February 2014  |  9134 views  |  0 comments | 13 tweets | 18 linkedin
Apple adds fingerprint sensor to new model iPhone

Apple adds fingerprint sensor to new model iPhone

11 September 2013  |  8039 views  |  3 comments | 5 tweets | 3 linkedin

Related company news

 

Related blogs

Create a blog about this story (membership required)
Visit https://info.nice.com/Visit iliad-solutions.com/Visit www.abe-eba.eu

Top topics

Most viewed Most shared
GPS raises £44 million to fund international growthGPS raises £44 million to fund intern...
23044 views comments | 7 tweets | 8 linkedin
DBS to use robot to screen applicants for human jobsDBS to use robot to screen applicants for...
8731 views comments | 3 tweets | 7 linkedin
Robots save Nordea from GDPR processing nightmareRobots save Nordea from GDPR processing ni...
8718 views comments | 10 tweets | 17 linkedin
BIS: Cryptocurrencies are an environmental disaster that could break the InternetBIS: Cryptocurrencies are an environmental...
7831 views comments | 18 tweets | 23 linkedin
BBVA aims to convert half of its customer base to mobile banking within the next yearBBVA aims to convert half of its customer...
7363 views comments | 13 tweets | 18 linkedin

Featured job

to $120K base, 200K ote, benefits
New York City, NY - USA

Find your next job