Security flaw allows PC access without fingerprint

According to Neowin , the Blackwell Intelligence team revealed their findings in October during Microsoft's BlueHat security conference, but they only posted the results on their own website this week. The blog post, titled "A Touch of Pwn," said the team used fingerprint sensors inside Dell Inspiron 15 and Lenovo ThinkPad T14 laptops, as well as Microsoft Surface Pro Type Covers with Fingerprint ID made for the Surface Pro 8 and X. The specific fingerprint sensors were manufactured by Goodix, Synaptics, and ELAN.

It took Blackwell about 3 months of research to discover a vulnerability in Windows Hello.

All of the Windows Hello-enabled fingerprint sensors we tested use chip-based hardware, meaning authentication is handled on the sensor itself, which has its own chip and storage.

In his statement, Blackwell said that the database of “fingerprint templates” (biometric data captured by the fingerprint sensor) is stored on the chip , and the registration and matching are done directly on the chip. Since the fingerprint templates never leave the chip, this eliminates privacy concerns as the biometric data is stored securely. It also prevents attacks that involve sending valid fingerprint images to a server for matching.

Blackwell, however, managed to bypass the system by using reverse engineering to find vulnerabilities in fingerprint sensors, then creating his own USB device that could perform a man-in-the-middle (MitM) attack. This device allowed the group to bypass the fingerprint authentication hardware in those devices.

Blackwell also said that although Microsoft uses the Secure Device Connection Protocol (SDCP) to provide a secure channel between the server and the biometric device, two of the three fingerprint sensors tested did not even have SDCP enabled. Blackwell recommends that all fingerprint sensor companies not only enable SDCP on their products, but also have a third-party company ensure it works.

One thing to note is that it took Blackwell about three months of effort to get past these fingerprint hardware products. It’s not clear how Microsoft and other fingerprint sensor companies are going to fix the problem based on this research.

Source link: https://thanhnien.vn/lo-hong-bao-mat-cho-phep-truy-cap-pc-khong-can-dau-van-tay-185231123063614637.htm