Yeah, so this isn't good.。
What if the very act of tapping your smartphone's passcode was all it took to expose that code to hackers?
Are you sitting down right now? You should probably sit down. 。
SEE ALSO:Put a lock screen on your phone, sheeple! 。Remember that story on how fingerprint locks on smartphones can be duped? And that Samsung's facial recognition system can be tricked with a photo of a person?
Well, as more and more of our personal data is stored on smartphones, the ways of securing those phones continue to be revealed as less and less robust. Next on the chopping block is your trusty PIN.。
Thanks for signing up! 。 Modern smartphones come equipped with tons of sensors: cameras, microphones, GPS, accelerometers, gyroscopes, etc. According to a new study published in the 。Journal of Information Security and Applications 。
, this data in aggregate is precise enough to determine what actions a user is taking with her phone — right down to the password she taps to unlock it.。
A little malicious code plus the sensors that come standard on most smartphones is apparently all that it takes these days to render your phone's security moot.。
The study authors haven't found this attack in the wild, but rather demonstrated that it works. Which, frankly, is scary enough. As Wikileaks' dump of alleged CIA hacking tools has shown, known attacks have a way of getting passed around.。
"Our study confirms that embedded JavaScript code can compromise user sensitive information by listening to the side channel data provided by the motion and orientation sensors without any user permission, through an inactive tab, iframe, or minimised browser (even when the screen of the mobile phone is locked)," wrote study co-author Dr. Maryam Mehrnezhad on the Newcastle University blog. "We demonstrate the practicality of this attack by collecting data from real users and reporting high success rates, up to 70% identification of digits (PIN) in Android and 56% in iOS."。
A lot of browsers are susceptible, including Chrome, Firefox, and Safari. That means you don't even have to click a weird link or download a strange file to accidentally leak your taps to a malicious hacker or government official.。
Featured Video For You。
(责任编辑:時尚)
You can now play 'Solitaire' and 'Tic
Gorgeous video takes you on a trip above Mars
Botnets are zombie armies and other helpful analogies from Alphabet's new Chrome extension
'Ghost in the Shell' gets brutally dragged in its own viral campaign
WhatsApp announces plans to share user data with Facebook
Cutest nosy neighbor ever is one pouncing pooch
The 'Trainspotting' sequel to hit U.S. at secret SXSW screening
College students stage buzzer beater that's almost more thrilling than actual March Madness
PlayStation Now game streaming is coming to PC
Silicon Valley boy king Mark Zuckerberg announces he's having another Zuckerbaby
Slack goes down again, prompting anxiety everywhere
Is this 'Snowden' clip where Kellyanne Conway got the idea for spying microwaves?