Fingerprint identification or generic vulnerability: LG V10 can forcibly add fingerprints
Fingerprint identification or generic vulnerability: LG V10 can forcibly add fingerprints

LG V10 is the real flagship launched by LG at the end of 2015. It is also the first flagship of LG to use metal body and fingerprint identification (although only stainless steel is added on both sides). It never rains but it pours. After the LG G4 crashed, the LG V10 was exposed to have a fingerprint identification vulnerability.


The left is the system activities list, and the right is the fingerprint entry interface

This vulnerability is not due to fingerprint identification itself, but in the process of fingerprint entry. Usually, the fingerprint needs to be verified with the host fingerprint or password before entering to prevent others from taking the opportunity to add fingerprints. However, LG V10 can use an app (such as NOVA desktop) with a shortcut to create activity (similar to function entry), skip the verification steps of the host fingerprint/password, and add fingerprints directly

Similar methods may also be applicable to many fingerprint identification models, but the risk of this vulnerability is not high. After the phone is unlocked, a third-party application is installed and fingerprint entry is completed. This is a time-consuming operation in itself. V10 users need not worry too much.

The LG official did not respond to this. Before the vulnerability is repaired, the simplest preventive measure is to fill in the four preset fingerprint positions first

Share:
Charles Fang
Ordinary geek
Benefits!

Scan QR code and follow the author

Share Weibo Share WeChat
 Aigoji WeChat

Aigoji WeChat

 WeChat

WeChat

Recommended products

Sorry, the product you are looking for is not available in the product library

on trial