Smudges + Touchscreen+ Possible Hacked Phone

[Shack]

Found this interesting and figured I would pass it forward.

Smudges on your Android touchscreen could give away your password

The swirls of greasy fingerprints and smudges on your smartphone's screen aren't just unsightly—they're also a potential security weakness that can give someone unauthorized access to your phone.

University of Pennsylvania researchers have found a the vulnerability in touchscreen-based security systems. The primary focus of their research was analyzing the swipe-style unlock system on Android phones. They had a surprisingly easy time recreating the access codes on touchscreen systems using nothing more than a camera and a computer with some basic photo-editing software. By photographing the screen at an angle, increasing the contrast, and studying the directional patterns of the smudges, they were able to unlock the Android security screen 92% of the time.

Interestingly, putting the phone into a pocket didn't provide enough contact with the screen to clean the screen and in all cases they were able to retrieve the pattern. Cleaning it with a cleaning cloth or a screen cleaner, however, removed the evidence and secured the screen. Finally you can justify your frequent screen cleaning as a security precaution. Check out the full study white paper at the link below or sound off in the comments with your ideas on how touchscreens could be designed with security in mind.

[DTro]

well, no password means no worries

[LwnmwnMan2]

So this would worry me how???

[Shack]

I just figured it was just good advice for those who use a touch screen and use their phone for personal or work related stuff. I do flip on my pass code feature when I go out. I bank on my phone & have some sensitive work related stuff in my e-mail. Just do not care even if some found my phone going through my e-mail. Also even the chance of someone getting access to some of my on-line accounts like HSO, Photobucket, You-tube, and others I can not think of. I guess if I loose my phone when I do not have the pass code set, I would have no one to blame but my self. Then again remembering to clean my phone would be something I would have to get use to.

If you are not worried, then no cause to be worried.

Just found it interesting.

[LwnmwnMan2]

So, what they're saying is that if your password was "fishing", there would be smudges on the f,i,s,h,n, and g?

Wouldn't there be smudges all over the screen depending on what you're doing with it?

[Shack]

Oh? Lol. I see what you are saying.

With my IPhone I have a four digit number I punch in on a key pad like a touch tone pad. Only option the iPhone has. For a hacker to narrow down a pass code to only for numbers possible would give them pretty much the pass code in minutes.

With the Android or Droid I guess you have to swip some color strips. The study was done based on this and a 92% chance of getting your pass code is huge.

If you have the option of using fishing, then no worries dude.

[deadeye]

With 2.2 you don't have to worry about that since they are switching to a whole new system to unlock the phone. Or you can not bother with the unlock password it wont be a issue.

Besides, if your letting someone creep on you close enough that they can see your passwords for opening your phone or otherwise your wrong. It is then time to show them that " sweet new app" and smash their forehead with your phone when they look.