So, should Windows 10 users stop using Windows Hello authentication? Stage two is the insertion of a custom-built USB device that can then inject the spoofed image. So already, this is starting to sound like a somewhat unlikely risk to the average user.Īnd it gets even more unlikely when you realise that even if the attacker got that infra-red image of your face, they would still require physical access to your computer for stage two. The researchers say that this can be achieved by walking past someone, placing a camera in an elevator, etc.
For a start, the attacker needs that infra-red image of the user. The exploitation of the vulnerability is far from an easy process. Well, sort of, and this is where the scariness starts to fade a little. Complexity of exploitation lessens the impact considerably for most users The vulnerability, then, being that an attacker would only need a single, valid, infra-red frame to bypass the system.
0 kommentar(er)
