The Galaxy S8's iris scanner can be bypassed using a digital camera and a contact lens, researchers show


It's a pretty well known fact at this point that using any form of biometric authentication, such as a fingerprint scanner or face unlocking, is essentially choosing convenience over actual security. That is, there are a ton of ways to fool the current technology, and while passwords can be changed, physical features cannot, plastic surgery notwithstanding. This has once again been proven right, as a group of researchers from the Chaos Computer Club, who have demonstrated a method for bypassing the Samsung Galaxy S8's iris scanner.

The process, as demonstrated in the video above, is actually pretty simple: a photo of the subject is taken from a moderate distance with a digital camera (using night mode, so as to capture the same infrared image the S8's scanner would see). Then, the photo is printed out, with the best results coming, ironically, from a Samsung laser printer. And lastly, a contact lens is placed above the printed iris to simulate a three-dimensional object, which the iris scanner then erroneously recognizes as the real thing.

Or in other words, anyone with the ability to take a frontal picture of you can gain access to your device with minimal effort and resources, while Samsung claims its iris scanner provides "airtight" security, and "is one of the safest ways to keep your phone locked and the contents private." Whoops.

Still, such an attack requires a person extremely dedicated to unlocking another's phone, so chances are the everyday consumer is mostly in the clear. However, this does serve as a good reminder to never fully trust a company claiming to have reinvented security overnight.

Related phones

Galaxy S8
  • Display 5.8 inches
    2960 x 1440 pixels
  • Camera 12 MP (Single camera)
    8 MP front
  • Hardware Qualcomm Snapdragon 835
    4GB RAM
  • Storage 64GB, microSDXC
  • Battery 3000 mAh
  • OS Android 9.0 Pie
    Samsung One UI
Galaxy S8+
  • Display 6.2 inches
    2960 x 1440 pixels
  • Camera 12 MP (Single camera)
    8 MP front
  • Hardware Qualcomm Snapdragon 835
    4GB RAM
  • Storage 64GB, microSDXC
  • Battery 3500 mAh
  • OS Android 9.0 Pie
    Samsung One UI

FEATURED VIDEO

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.
FCC OKs Cingular's purchase of AT&T Wireless