Collaborate Disseminate
Apple’s FaceID has a liveness detection feature, which prevents someone from unlocking a victim’s phone by putting it in front of his face while he’s sleeping. That feature has been hacked: Researchers on Wednesday during Black Hat USA 2019 demonstrated an attack that allowed them to bypass a victim’s FaceID and log into their phone simply by putting a pair… Continue reading Bypassing Apple FaceID’s Liveness Detection Feature
In my work with online orders, I started noticing an extreme abnormality in a few orders. In one field that wasn’t restricted there appeared a string of over 3 million characters that were totally gibberish consisting mostly … Continue reading Very strange gibberish strings with Cyrillic characters that appear in random websites and elsewhere
MIT Technology Review is reporting about an infrared laser device that can identify people by their unique cardiac signature at a distance: A new device, developed for the Pentagon after US Special Forces requested it, can identify people without seein… Continue reading Cardiac Biometric
MIT Technology Review is reporting about an infrared laser device that can identify people by their unique cardiac signature at a distance: A new device, developed for the Pentagon after US Special Forces requested it, can identify people without seeing their face: instead it detects their unique cardiac signature with an infrared laser. While it works at 200 meters (219… Continue reading Cardiac Biometric
This clever attack allows someone to uniquely identify a phone when you visit a website, based on data from the accelerometer, gyroscope, and magnetometer sensors. We have developed a new type of fingerprinting attack, the calibration fingerprinting attack. Our attack uses data gathered from the accelerometer, gyroscope and magnetometer sensors found in smartphones to construct a globally unique fingerprint. Overall,… Continue reading Fingerprinting iPhones
I often recognise that people blur their license plates on pictures on the internet in Germany. I can’t figure out what’s the fuss. The information is public nevertheless (I mean it’s on your vehicle), nobody but appropriated… Continue reading Why do people hide their license plates in the EU?
Earlier this year, only days after KnowB4’s chief hacking officer Kevin Mitnick demonstrated how to bypass two-factor authentication (2FA) on CNBC, security researcher Piotr Duszynski warned about a new penetration testing tool that was being used to … Continue reading Is 2FA Broken, or Just Evolving?
A federal court has ruled that suspects can’t be forced to provide a biometric key to unlock their digital devices during an investigation. When two individuals were involved in a Facebook sextortion case, threatening to release an embarrassing … Continue reading Biometrics: Giving the Government the Finger
Can anyone share their experience using RingCaptcha’s phone identification and verification using SMS/Voice? I am told they are really good at this and outperform twilio and infobip with their single SMS API Gateway service. … Continue reading Any users of RingCaptcha service? [on hold]
Is there a best practice (or useful extension) for defending against adblock fingerprinting techniques? I’m not asking about how to bypass adblock detection as such, but rather how one might appear invisible (or spoof one’s i… Continue reading How to defend against adblock detection/adblock subscription leaks?