Researchers Develop New Way To Steal Passwords Using Google Glass 116
mpicpp writes with a story about researchers who have developed a way to steal passwords using video-capturing devices.Cyber forensics experts at the University of Massachusetts in Lowell have developed a way to steal passwords entered on a smartphone or tablet using video from Google's face-mounted gadget and other video-capturing devices. The thief can be nearly ten feet away and doesn't even need to be able to read the screen — meaning glare is not an antidote. The security researchers created software that maps the shadows from fingertips typing on a tablet or smartphone. Their algorithm then converts those touch points into the actual keys they were touching, enabling the researchers to crack the passcode. They tested the algorithm on passwords entered on an Apple iPad, Google's Nexus 7 tablet, and an iPhone 5.
Watching them enter the passcode. (Score:5, Funny)
TLDR - Researchers steal passwords by watching them being entered.
This is why genital recognition is needed. (Score:2, Funny)
The fact that the device is out in the open when the password is entered is the problem here.
There's one technology that solves this problem, and that technology is genital recognition. It works like a password, but it depends on the unique pattern exhibited by each individual's genitalia.
When a password needs to be entered, the user puts the phone down his or her pants/skirt/dress/whatever, and presses the screen against his or her genitalia. The pattern is then analyzed and compared against known data points modeling the genitalia. If there is a match, then the authentication succeeds. If there is not a match, then the authentication fails.
The important thing to remember is that the authentication happens in a secure area: within one's underwear. This helps prevent observers from deducing the password based on visible effects such as shadows and reflections.
Re:That does it (Score:5, Funny)
Time to trademark a 'No Glass Allowed' symbol.
Better make it "No Cameras Allowed". Which, incidentally, also means "No Smartphones or Tablets Allowed", since they all have cameras... which would actually eliminate the risk of passwords being stolen as they're entered into a smartphone or tablet, since no smartphones or tablets are allowed. Problem solved!
Re:Cover your input (Score:4, Funny)
Damn you! When I tried to cover my hand with the other one, my phone dropped to the floor...
Re:Sensationalistic title and duh! (Score:4, Funny)