velu Posted December 28, 2014 Posted December 28, 2014 can u make same pap for iphone ? also think there waso ne phone with even better touch id than iphone you do not even need to wake phone up and just put finger on it and it will unlock iOS wont allow reading current running process/app :--D even though android allows or leaves a loophole to block the app ( by minimizing it by imitating home key press ) its not a clean way of doing it considering it from OS point of view i was going through samsung knox .. its more or less a glorified launcher and nothing more :hysterical:
Old guy Posted December 28, 2014 Posted December 28, 2014 its not android but samsung problem when android implements touch id it will have apis too probably some company lke motorola need to do it properly
velu Posted December 28, 2014 Posted December 28, 2014 samsungs implementation of the fingerprint scanner is faulty n half baked .. samsung should have gone for similar approach like touch id , but tried other way to make it different than apple .. there is a very grave bug in fingerprint scanner which can be exploited .. smasung returns the registration number of the fingerprint ( 1 , 2 or 3 ) when asking for validation rather than returning/keeping a unique id for every fingerprint.. if two people are sharing the same phone and both their fingerrints are registered ( very practilae scenario between couples ) , one can delete and replace others fingerprint id .. this is plain stupid .. ( there is an api to return/register unique id , but it is left unimplemented )
Old guy Posted December 28, 2014 Posted December 28, 2014 samsungs implementation of the fingerprint scanner is faulty n half baked .. samsung should have gone for similar approach like touch id , but tried other way to make it different than apple .. there is a very grave bug in fingerprint scanner which can be exploited .. smasung returns the registration number of the fingerprint ( 1 , 2 or 3 ) when asking for validation rather than returning/keeping a unique id for every fingerprint.. if two people are sharing the same phone and both their fingerrints are registered ( very practilae scenario between couples ) , one can delete and replace others fingerprint id .. this is plain stupid .. ( there is an api to return/register unique id , but it is left unimplemented ) how can this happen ? don't you need password and finger print to enter settings for that in first place ? and who shares phone ? even on apple if you have one finger registered you can change everything and even reset phone . on my phone you can make guest accounts and maybe you can set profile when samsung gets lollipop update ..that is the best solution
velu Posted December 28, 2014 Posted December 28, 2014 how can this happen ? don't you need password and finger print to enter settings for that in first place ? and who shares phone ? even on apple if you have one finger registered you can change everything and even reset phone . on my phone you can make guest accounts and maybe you can set profile when samsung gets lollipop update ..that is the best solution for resetting the phone , we just need access to the settings right ?? actually my issue is how fingerprint apis are implemented .. as of now that api will return only the number of the registered finger ( stored as 1 , 2 or 3 ).. now any of the registered fingerprints can replace the others fingerprints.. mean yours is #3 and your wifeys is #1 and #2, you can replace #1 and #2 with your fingerprints.. but every finger should have an unique id ( not implemented unitl now ).. i am 100% sure paypal app also stores our fingerprint as 1 , 2 or 3 rather than a unique id for every finger
Old guy Posted December 28, 2014 Posted December 28, 2014 for resetting the phone , we just need access to the settings right ?? actually my issue is how fingerprint apis are implemented .. as of now that api will return only the number of the registered finger ( stored as 1 , 2 or 3 ).. now any of the registered fingerprints can replace the others fingerprints.. mean yours is #3 and your wifeys is #1 and #2, you can replace #1 and #2 with your fingerprints.. but every finger should have an unique id ( not implemented unitl now ).. i am 100% sure paypal app also stores our fingerprint as 1 , 2 or 3 rather than a unique id for every finger but that is payment app it will obviously have addition security but this is how it works even on iphone i think why don't you try ?
velu Posted December 28, 2014 Posted December 28, 2014 but that is payment app it will obviously have addition security but this is how it works even on iphone i think why don't you try ? in touch id , every id is identified by unique number .. in fingerprint scanner its identified by 1 , 2 or 3.. got it ? samsung has api to identify by unique id but that function just a wrapper .. i have not used paypal with fingerprint .. but i am certain paypal also authenticates based on this .. you cant assume that only the owner of the device can access the fingerprint .. there are many ways to break it i goggled sometime back , similar app is not possible ( even android screwed MDM apps in lollipop , but let other apis to stay for time being ).. its a big security loophole , android had those apis just for debugging purpose but many developed apps based only on those 2 apis
Old guy Posted December 28, 2014 Posted December 28, 2014 in touch id , every id is identified by unique number .. in fingerprint scanner its identified by 1 , 2 or 3.. got it ? samsung has api to identify by unique id but that function just a wrapper .. i have not used paypal with fingerprint .. but i am certain paypal also authenticates based on this .. you cant assume that only the owner of the device can access the fingerprint .. there are many ways to break it i goggled sometime back , similar app is not possible ( even android screwed MDM apps in lollipop , but let other apis to stay for time being ).. its a big security loophole , android had those apis just for debugging purpose but many developed apps based only on those 2 apis sorry but i do not understand..if you are sharing your phone and allowing them to have finger print on personal device like phone then you are not normal user i agree they should improve it at basic level but i do not see big problem . i do not know about how apps are using it my guess will be no apps use it other than some samsung paid :cantstop:
velu Posted December 28, 2014 Posted December 28, 2014 sorry but i do not understand..if you are sharing your phone and allowing them to have finger print on personal device like phone then you are not normal user i agree they should improve it at basic level but i do not see big problem . i do not know about how apps are using it my guess will be no apps use it other than some samsung paid :cantstop: it doesnt matter whether we are sharing the device or not , it should not leave the door open.. what is worse is there is an api to register it as unique number for every fingerprint , but for some reasons they are yet to do it.. it is like , giving same bank account number to other member if the same account number was closed earlier.. actually more interesting thing is , lollipop has got guest mode but samsung knox was also doing more or less the same thing .. igoogle is a cunning bastard :--D
Old guy Posted December 28, 2014 Posted December 28, 2014 it doesnt matter whether we are sharing the device or not , it should not leave the door open.. what is worse is there is an api to register it as unique number for every fingerprint , but for some reasons they are yet to do it.. it is like , giving same bank account number to other member if the same account number was closed earlier.. actually more interesting thing is , lollipop has got guest mode but samsung knox was also doing more or less the same thing .. igoogle is a cunning bastard :--D come on ....android has had guest mode in tablets since jelly bean @ way before knox was created they jsut ported it to phone
velu Posted December 28, 2014 Posted December 28, 2014 Dude.. IOS has this restriction setting which is more or less sane as app locker :mad: Sent from my iPhone using Tapatalk
Recommended Posts