022: Walk this way... to defeat biometrics

The Samsung Galaxy S8 claims that its iris recognition technology provides "airtight security", but the Chaos Computer Club knows better and shows how it can be easily bypassed. Australian researchers create a wearable gizmo that authenticates you through your walk, but is it ever going to be practical? Mac malware reportedly wastes no time stealing information from a software developer. And the boss of the Bank of England is smart enough not to fall for an email prankster.
All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul "Duck" Ducklin.
Show notes: https://www.ccc.de/en/updates/2017/iriden (Chaos Computer Clubs breaks iris recognition system of the Samsung Galaxy S8) - Chaos Computer Club.
Breaking the iris scanner locking Samsung’s Galaxy S8 is laughably easy - Ars Technica.
New technology uses the way you walk as a password - CNet.
Hofmeister - follow the bear TV advert - YouTube.
https://www.youtube.com/watch?v=9ZlBUglE6Hc (Monty Python's Flying Circus's Ministry of Silly Walks sketch) - YouTube.
Source Code for Several Panic Apps Stolen via HandBrake Malware Attack - MacRumors.
Bank of England accused of airbrushing Jane Austen on the new £10 note - Liverpool Echo.
Bank of England governor falls for email prank but maintains his composure - The Guardian.

Follow the show on Twitter at @SmashinSecurity, or http://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Paul Ducklin.
Sponsored By:
https://demos.launchkey.com/ (iovation): https://demos.launchkey.com/ (iovation is offering Smashing Security listeners a free demonstration of its mobile multifactor solution product, LaunchKey, which can be built into your mobile apps, websites and online services to provide a simple, streamlined remote login function.)

https://www.patreon.com/smashingsecurity (Support Smashing Security)

The Samsung Galaxy S8 claims that its iris recognition technology provides "airtight security", but the Chaos Computer Club knows better and shows how it can be easily bypassed. Australian researchers create a wearable gizmo that authenticates you through your walk, but is it ever going to be practical? Mac malware reportedly wastes no time stealing information from a software developer. And the boss of the Bank of England is smart enough not to fall for an email prankster.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul "Duck" Ducklin.

Show notes: Chaos Computer Clubs breaks iris recognition system of the Samsung Galaxy S8 - Chaos Computer Club. Breaking the iris scanner locking Samsung’s Galaxy S8 is laughably easy - Ars Technica. New technology uses the way you walk as a password - CNet. Hofmeister - follow the bear TV advert - YouTube. Monty Python's Flying Circus's Ministry of Silly Walks sketch - YouTube. Source Code for Several Panic Apps Stolen via HandBrake Malware Attack - MacRumors. Bank of England accused of airbrushing Jane Austen on the new £10 note - Liverpool Echo. Bank of England governor falls for email prank but maintains his composure - The Guardian.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Paul Ducklin.

Sponsored By:

iovation: iovation is offering Smashing Security listeners a free demonstration of its mobile multifactor solution product, LaunchKey, which can be built into your mobile apps, websites and online services to provide a simple, streamlined remote login function.

Support Smashing Security