Smartphone pattern passwords are not secure.

February 1, 2017 13:41

Researchers recently showed how mobile security attackers can remotely crack any pattern lock on Android devices.

According to Zdnet, attackers can break any pattern lock on Android in just 5 allowed attempts, achieving a success rate of up to 95%.

British and Chinese researchers performed a side-channel attack using video captured from a smartphone camera and a computer vision algorithm to crack the pattern lock.

Không nên sử dụng mã pattern lock để lưu giữ dữ liệu quan trọng. Ảnh: Zdnet.
Pattern lock codes should not be used to store important data. Photo: Zdnet.

They found that more complex keys were easier to break (95%) than simpler (60%) and intermediate (87%) keys.

Attackers will film the victim while unlocking, take advantage of the victim's absence to access the device and jailbreak, steal data and even install malware.

However, this attack can only use shoulder surfing technique (technique to collect passwords by looking over someone's shoulder when they log in to the system). However, it is advised for all Android users not to use pattern lock to store important data.

"Pattern lock is a very popular form of password today, especially on Android devices. Users often set complex passwords for their banking or online shopping accounts because they believe it is safe," said Dr. Zheng Wang, a lecturer at Lancaster University. "However, we found that using pattern lock to protect important data is actually very dangerous."

In addition, security forms using passwords or PIN codes are also vulnerable to side-channel attacks.

To avoid being hacked, researchers recommend that users use all their fingers when drawing their password.

According to Zing

RELATED NEWS

Featured Nghe An Newspaper

Latest

x
Smartphone pattern passwords are not secure.
POWERED BYONECMS- A PRODUCT OFNEKO