Security News Windows Hello Auth Bypassed On Microsoft, Dell and Lenovo Laptops

[Dark Knight]

Content source

https://www.bleepingcomputer.com/news/security/windows-hello-auth-bypassed-on-microsoft-dell-lenovo-laptops/

What is really disturbing is this tech developed by Microsoft was beaten easily on their very own product .....

Windows Hello auth bypassed on Microsoft, Dell, Lenovo laptops

Security researchers bypassed Windows Hello fingerprint authentication on Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X laptops in attacks exploiting security flaws found in the embedded fingerprint sensors.

www.bleepingcomputer.com

 

[Vasudev]

What is really disturbing is this tech developed by Microsoft was beaten easily on their very own product .....

Windows Hello auth bypassed on Microsoft, Dell, Lenovo laptops

Security researchers bypassed Windows Hello fingerprint authentication on Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X laptops in attacks exploiting security flaws found in the embedded fingerprint sensors.

www.bleepingcomputer.com

Windows Hello IR never worked on new lenovo laptop which is Thinkpad L14. Avoided extra cost in favor of IR camera. It always returns Hello Compatible device not found. IR camera works with their Miratrix or something software.

 

[silversurfer]

Well, even more important is what the same researchers said on their blog:

Microsoft’s Offensive Research and Security Engineering (MORSE) asked us to evaluate the security of the top three fingerprint sensors embedded in laptops and used for Windows Hello fingerprint authentication. Our research revealed multiple vulnerabilities that our team successfully exploited, allowing us to completely bypass Windows Hello authentication on all three laptops.

A Touch of Pwn - Part I

Blackwing Intelligence provides high-end security engineering, analysis, and research services for engineering focused organizations

blackwinghq.com

 

[Dark Knight]

Does this just affect Microsofts embedded fingerprint scanner or would it affect third party external scanners also?