To try an expose weakness in the iPhone 5S' new fingerprint technology, Internet hacker Nick DePetrillo (@NickDePetrillo) posted to his website a reward for the first person to successfully hack the security system in five tries or less.
On his website (IsTouchIDHackedYet.com), he offered other people to post what they would give as a reward in addition to his offer of $100. Not even a week into existence, the reward was claimed by Chaos Computer Club (CCC), who announced via blog post its biometric hacking team had done it.
CCC, a German tech blog, posted a short video with the blog post showing his successful technique. DePetrillo later confirmed the successful hack and linked to a full video walkthrough of CCC's technique.
PC Magazine reported that not all the rewards posted to DePetrillo's website had to be paid up, but Starbug, as the winner was identified, will be rewarded with $990 and 0.661 bitcoins in reward money. At one point, a reward of $10,000 was posted, but it was taken down after the contest winner was announced.
In total, before the time came to ante up or take the reward down, Starbug would have received $8,364.01, 100 euros, approximately $2,779 in bitcoins, seven bottles of wine and liquor, a free patent for the hacking technique and a "dirty sex book."
Mark Rogers, a researcher for the Security firm Lookout, based in San Francisco, confirmed via blog post that he too hacked the iPhone 5S' fingerprint scanner. He said he still thinks the security measure is "awesome."
"Hacking Touch ID relies upon a combination of skills, existing academic research and the patience of a Crime Scene Technician," he wrote.
First, the hacker would need a clean, un-smudged print to lift off the home button and must guess correctly the finger the user used. Lifting the print, he said, is a challenge itself with another chance for the hacker to smudge the print. Once the print is lifted, the original is destroyed and a chance at lifting another if the first attempt is unsuccessful becomes impossible.
Lastly comes reproducing the print to unlock the phone with. He said this is "a lengthy process that takes several hours and uses over a thousand dollars worth of equipment including a high resolution camera and laser printer."
Rogers acknowledged that, no matter how complicated, there are ways to beat the fingerprint ID and the four-digit PIN security measures. However, he said together they make a formidable opposition to any hacker.
The Touch ID must be unlocked in five attempts otherwise the iPhone will lock out any and all fingerprints. Even though an average street thief would have to be extremely lucky to hack the fingerprint security measure, it is not impossible.
