UM takes part in study highlighting smart devices’ vulnerability

It is common for people to set four-digit security passwords on their mobile devices. But when entering the password to unlock the device, they have no idea that they might be observed or even video-recorded.
A collaborative study joined by the University of Macau (UM) has found that hackers, when seeking to steal passwords entered on a smartphone or tablet, can readily exploit smart devices such as iPhones and Google Glasses. As a result, information such as bank details can be left vulnerable. The study was jointly conducted by the University of Massachusetts (UMass) in Lowell, Towson University near Baltimore, Southeast University in Mainland China as well as UM.
The research teams have created software that maps the shadows cast by fingertips typing on a tablet or a smartphone. The algorithm then converts those touch points into the actual keys they were touching, allowing the researchers to crack the password.
Researchers tested the software with an iPhone 5, a high definition camera worth USD72, and a Google Glass device. They found that the software’s accuracy level reached 83 per cent when a Google Glass was used with the target placed three meters away, and that the accuracy level reached 92 per cent when using an iPhone 5 or a Logitech camera. In both cases the hackers did not need to be able to read the screen. Therefore, if someone were to access his/her bank account on a smart device in this kind of situation, the bank account password would very likely be cracked. Experts suggest that users should set up longer and more complex passwords for their smartphones or tablets, in order to protect themselves against hackers. In the meantime, Fu advises users to take extra precaution by covering your typing hand with your free hand as you type in your passcode when unlocking a smart device in public.
The group will officially present its findings at this year’s Black Hat USA cyber-security conference, which will be held in Las Vegas later this month.GY