 |
| from here and here |
My fingers are resting just a little bit easier knowing that there are now attacks against fingerprint authentication that involve a dictionary of digitized fingerprints. I'd just as soon the vulnerabilities involved not get fixed as that would force attackers back to using less civilized means.
I suppose it might be more accurate to call it a dictionary attack rather than a brute force attack, but what do I know?
 |
| from here and here |
There is certainly a delicious irony in Google getting called out by none other than Google for taking to long to patch their shit. Seemingly the patch has been available for more than the 90 days that Google's Project Zero usually gives vendors. They didn't even need to develop the patch themselves, just apply it to their product, but apparently it's gotten held up in testing.
Kinda makes you wonder, if Google can't even adhere to their own 90 day policy, why is it reasonable to expect it from others?