FB pixel

Touch ID returns for new iPhone SE as OnePlus fingerprint biometric vulnerability found and patched

 

Fingerprint-Identification

Even a deadly pandemic has not prevented Apple from launching a new iPhone, the second-generation iPhone SE, which includes Touch ID fingerprint biometrics integrated with a front-mounted home button instead of Face ID facial recognition.

The new smartphone retails for a suggested $399, and features an A13 Bionic chip, which is used in other iPhones and the company calls the fastest in such a device, and a 4.7-inch Retina HD display, which is among the smallest Apple has released.

There are few differences between the appearance of the iPhone SE and an iPhone 8, the Wall Street Journal writes.

The iPhone SE includes a rear camera with high-quality video capture, according to the company’s announcement, but the Journal reports it has generally more modest camera specifications than higher-end iPhones.

According to the Journal, a new line of iPhones slated for a fall release will feature a new design and 5G connectivity.

OnePlus biometric data vulnerability reported

OnePlus 7 Pro Android phones have a vulnerability which allows an attacker with root privileges to exfiltrate bitmap fingerprint images from the device’s Trusted Execution Environment (TEE), according to a blog post from the Synopsys Cybersecurity Research Center’s (CyRC).

Vulnerability CVE-2020-7958 makes images from the fingerprint sensor of the OnePlus 7, which should only be accessible in the TEE, available from the Rich Execution Environment (REE). The vulnerability has a CVSS 3.0 overall score of 6.6, which places it near the high end of the medium severity rating.

An attacker gaining root privileges in the REE can communicate directly with factory testing APIs exposed by Trusted Applications running in the TEE, CyRC explains, enabling a sequence of commands to expose the biometric data.

OnePlus addressed the vulnerability with the 10.0.3.GM21BA software build, which all users should update their devices to.

Article Topics

 |   |   |   |   |   |   | 

Latest Biometrics News

 

As retailers turn to biometrics to reduce theft, costs of poor implementation loom

Demand for biometrics to reduce retail crime continues to rise, but the risk of flawed deployments of the technology are…

 

Socure announces faster biometric IDV, deepfake and synthetic identity fraud detection

Identity verification provider Socure has announced the launch of its next generation DocV, now including enhanced deepfake selfie biometrics detection…

 

Rights group criticize EU AI Act for inadequate protections against potential abuse

The EU’s AI Act is done, and no one is happy. Having been adopted by the European Parliament in March…

 

Kids Code bills prompt epic showdown between regulators, activists and big tech firms

The latest craze sweeping the United States – legislation to protect kids’ data and overall online safety – has its…

 

UK’s £54M welfare fraud case illustrates need for biometric identity verification

A team of fraudsters has been convicted for what was described as “the largest case of benefit fraud in England…

 

Intellicheck, OneID tout banks’ unique position to cut fraud as digital ID enablers

Banks could play a significantly larger role in protecting consumers, businesses and payment systems from fraud, Intellicheck CEO Bryan Lewis…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Read From This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events