Security impact of high resolution smartphone cameras
Tobias Fiebig, Jan Starbug Krissler, Ronny Hänsch · 2014
Nearly every modern mobile device includes two cam-eras. With advances in technology the resolution of these sensors has constantly increased. While this develop-ment provides great convenience for users, for exam-ple with video-telephony or as dedicated camera replace-ment, the security implications of including high resolu-tion cameras on such devices has yet to be considered in greater detail. With this paper we demonstrate that an attacker may abuse the cameras in modern smartphones to extract valuable information from a victim. First, we consider exploiting a front-facing camera to capture a user’s keystrokes. By observing facial reflections, it is possible to capture user input with the camera. Sub-sequently, individual keystrokes can be extracted from the images acquired with the camera. Furthermore, we demonstrate that these cameras can be used by an at-tacker to extract and forge the fingerprints of a victim. This enables an attacker to perform a wide range of ma-licious actions, including authentication bypass on mod-ern biometric systems and falsely implicating a person by planting fingerprints in a crime scene. Finally, we introduce several mitigation strategies for the identified threats. 1