In the GeekPwn hacking conference, the fingerprint recognition function of Huawei P9 Lite was broken, which is surprising.
Does your phone have fingerprint recognition? If your answer is "yes", then you should be alert and even keep in mind for the following news. Because in the GeekPwn hacking contest held in Shanghai today, the team from the United States broke through the defense line of Huawei P9 Lite in an instant, so that they can successfully unlock the mobile phone without inputting fingerprints by the user. territory.
According to reports, Nike (in the first picture) from the Shellphish hacker team in the United States, in the GeekPwn hacker contest, through a two-stage attack, instantly break the fingerprint recognition line of Huawei P9 Lite. In the first step, he invited a field staff to enter fingerprints on the phone as the owner of the phone. The second step is to teach another female participant step by step, download the attack tool from the predetermined network address, and then unlock the phone through the user's "nose" touch!
By displaying the content, we can know that as long as the hacker has the opportunity to install their attack tool (App) on the mobile phone, the hacker can easily unlock the mobile phone and know any private information stored in the mobile phone, including the address book. , photos, community website usage rights, and more.
To be on the safe side, the hacker did not disclose the vulnerability he had taken, but the on-site commentator further explained his tactics, that is, through the App, the entire line of Root, and further into the area of ​​fingerprint data storage - TrustZone.
According to the name of the live host, this attack seems simple, but the hacker has used up to "8" vulnerabilities.
According to the official information released by GeekPwn, any device that uses Huawei TrustZone will be affected by the above attacks, including Huawei P8 Lite.
However, the above attacks seem terrible, but they are still not that serious. Because the whole thing starts, you still have to rely on the user to help unlock the phone. Therefore, by "do not let strangers use your mobile phone", you should be able to guard against it.
For the above hacking attack process, Huawei also analyzed and repaired it. And said that "any smart phone has certain security vulnerabilities. And the breakthrough display process can urge us to continuously explore product vulnerabilities, continuously verify the security of the product, and make the system more perfect, so that the product is relatively safe, and the user's interests are prevented from being malicious. Infringement."
Since the release of the Apple iPhone 5s in the fall of 2013, it has brought a wave of “fingerprint recognition†to the smart phone field. In order to save the user's extremely important "fingerprint" data (because the fingerprint can not be changed like a password, once it leaks, the endless troubles), including the chip company, mobile phone dealers, etc., have made some efforts to protect the fingerprint data of mobile phones. The above breakthrough of the TrustZone display process, not only affects Huawei and consumers, I am afraid that even the mobile phone chip licensee ARM (Anmou) will be shocked!
CSRME safety controller is developed for standard GB27607. By monitoring machine tool safety related equipment, the security of machine control system can meet the requirements of GB27607, and its security meets the requirements of ISO13849-1 (PLe) and IEC61508 (SIL3).
With rich interfaces, CSRME has limited programmable function. It can simultaneously replace many different types of safety control modules or safety PLCs, thus greatly simplifying the safety design of machine control systems and reducing cost.
Safety Controller,Modular Safety Controller,Safety Controller,Electrical Safety Controller,Programmable Logic Controller,Banner Safety Controller
Jining KeLi Photoelectronic Industrial Co.,Ltd , https://www.sdkelien.com