I kēia mau lā, ma ka IEEE Symposium on Security and Privacy, kahi hui o nā mea noiʻi mai ka Computer Laboratory o ke Kulanui o Cambridge. e pili ana i kahi nāwaliwali hou i nā smartphones i ʻae a hiki i nā mea hoʻohana ke nānā ʻia ma ka Pūnaewele. ʻO ka nāwaliwali i ʻike ʻia he mea hiki ʻole ke hoʻololi ʻia me ka ʻole o ka hoʻopili pololei ʻana o Apple a me Google a loaʻa i nā hiʻohiʻona iPhone āpau a i nā hiʻohiʻona liʻiliʻi o nā smartphones e holo ana i ka Android. No ka laʻana, loaʻa ia ma nā hiʻohiʻona Google Pixel 2 a me 3.
Ua hōʻike ka poʻe loea i ka loaʻa ʻana o ka nāwaliwali iā Apple i ʻAukake i ka makahiki i hala, a ua hoʻolaha ʻia ʻo Google i Dekemaba. Ua kapa ʻia ka haʻahaʻa ʻo SensorID a ua kapa inoa ʻia ʻo CVE-2019-8541. Ua hoʻopau ʻo Apple i ka pōʻino i ʻike ʻia me ka hoʻokuʻu ʻana o kahi patch no iOS 12.2 i Malaki. ʻO Google, ʻaʻole ia i pane i ka hoʻoweliweli i ʻike ʻia. Eia nō naʻe, ke haʻi hou aku nei mākou ʻoiai ua maʻalahi ka hoʻouka ʻana o ka SensorID ma kahi o nā hiʻohiʻona āpau o Apple smartphones, liʻiliʻi loa nā poʻe kelepona e holo ana i ka Android i ʻike ʻia e pili ana iā ia.
He aha ka SensorID? Mai ka inoa he mea maʻalahi ka hoʻomaopopo ʻana ʻo SensorID kahi ʻike kūʻokoʻa no nā mea ʻike. ʻO kahi ʻano hōʻailona kikohoʻe o ka hāmeʻa, ka mea i ka hapanui o nā hihia e pili ana i kahi kelepona kikoʻī a, no laila, ʻaneʻane pili mau i kahi kanaka kikoʻī.
Mahalo i ka hoʻoikaika ʻana o nā mea noiʻi palekana, ʻo ia pūlima he pūʻulu o ka ʻikepili e pili ana i ka calibration o ka magnetometer, accelerometer a me gyroscope sensors (no nā kumu maopopo, ua hui pū ʻia ka hana ʻana o nā mea ʻike me ka hoʻopuehu o nā ʻāpana). Ua kākau ʻia ka ʻikepili calibration i loko o ka firmware polokalamu ma ka hale hana, a hiki iā ʻoe ke hoʻomaikaʻi i ka hana o nā smartphones me nā mea ʻike - hoʻonui i ka pololei o ke kūlana a me ka pane ʻana o ke kelepona i nā neʻe. I ka nānā ʻana i kahi ʻaoʻao ma ka Pūnaewele me ka hoʻohana ʻana i kekahi polokalamu kele pūnaewele a i ka wā e hoʻomaka ai i kahi noi, ʻaʻole paʻa ka neʻe ʻana o ka atamai ma kou mau lima. Heluhelu manuahi nā pūnaewele i ka ʻikepili calibration e hoʻololi i ke kelepona a hiki koke mai kēia. Hiki ke hoʻohana ʻia kēia ʻike no ka hahai ʻana i kahi mea hoʻohana i ʻike ʻia ma nā pūnaewele ʻē aʻe. Ma hea ʻo ia e hele ai, he aha kāna hoihoi. He mea maikaʻi loa kēia ʻano no ka hoʻolaha ʻana. Eia kekahi, ma o nā hana maʻalahi, hiki ke hoʻopili ʻia kahi mea ʻike i kahi kanaka me nā hopena a pau.
ʻO ka nui o ka nāwaliwali o Apple smartphones i ka hoʻouka ʻana iā SensorID e wehewehe ʻia e ka aneane hiki ke helu ʻia nā iPhones āpau i nā polokalamu premium, ʻo ka hana ʻana o ia mea, me ka calibration hale hana o nā sensor, he kiʻekiʻe kiʻekiʻe. I kēia hihia, ua hāʻule kēia ʻimi ʻimi i ka ʻoihana. ʻAʻole hiki i ka hoʻonohonoho hale hana ke holoi i ka pūlima kikohoʻe SensorID. ʻO nā kelepona e holo ana i ka Android kekahi mea ʻē aʻe. ʻO ka hapa nui, he mau mea kūʻai ʻole kēia, ʻo ka hoʻonohonoho ʻana o ka hale hana i hele pinepine ʻole ʻia me ka calibration sensor. ʻO ka hopena, ʻaʻole i loaʻa i ka hapa nui o nā kelepona Android kahi hōʻailona kikohoʻe e hoʻokō i kahi hoʻouka ʻana iā SensorID, ʻoiai ua hōʻoia ʻia nā polokalamu premium e hui pū ʻia me ka maikaʻi kūpono a hiki ke hoʻouka ʻia ma muli o ka ʻikepili calibration.
Source: 3dnews.ru