{"id":54634,"date":"2023-11-22T15:02:58","date_gmt":"2023-11-22T15:02:58","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/35224\/Windows-Hello-Fingerprint-Authentication-Bypassed-On-Popular-Laptops.html"},"modified":"2023-11-22T15:02:58","modified_gmt":"2023-11-22T15:02:58","slug":"windows-hello-fingerprint-authentication-bypassed-on-popular-laptops","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/windows-hello-fingerprint-authentication-bypassed-on-popular-laptops\/","title":{"rendered":"Windows Hello Fingerprint Authentication Bypassed On Popular Laptops"},"content":{"rendered":"
<\/div>\n

Security researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to find a way to bypass authentication on each device.<\/strong>\n<\/p>\n

The research was conducted by security engineering and research services provider Blackwing Intelligence and Microsoft\u2019s Offensive Research and Security Engineering (MORSE).\n<\/p>\n

The targets were a Dell Inspiron 15 with a Goodix fingerprint sensor, a Lenovo ThinkPad T14s with the Synaptics sensor, and a Microsoft Surface Pro X, which has an ELAN sensor. \n<\/p>\n

The embedded fingerprint sensors and the host were targeted with software and hardware attacks. \n<\/p>\n

All the tested sensors are Match-on-Chip, which means the chip has a microprocessor and memory, and the fingerprint data never leaves the sensor. The chip itself needs to be attacked in order to bypass authentication. \n<\/p>\n

The attack requires physical access to the targeted device \u2014 the attacker would have to steal the device or use the evil maid method<\/a>. \n<\/p>\n

The attacks demonstrated by the researchers were conducted by connecting a hacking device to each laptop, via USB or by connecting the fingerprint sensor to a specially crafted rig.\n<\/p>\n

In the case of the Dell and Lenovo laptops, Windows Hello fingerprint authentication was bypassed by enumerating valid IDs associated with user fingerprints, and enrolling the attacker\u2019s fingerprint by spoofing a legitimate user\u2019s ID.<\/p>\n

Advertisement. Scroll to continue reading.<\/span><\/div>\n

In the case of the Surface device, the attacker needs to unplug the Type Cover<\/a>, which is basically the keyboard and also includes the fingerprint sensor, and connect a USB device that spoofs the fingerprint sensor and instructs the system that an authorized user is logging in.\n<\/p>\n

A blog post describing a part of the findings<\/a> was published on Tuesday by Blackwing. In addition, Microsoft has made public a video where Blackwing researchers presented their findings at the tech giant\u2019s BlueHat conference in October. \n<\/p>\n

\n

\n