Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps

Explore the security vulnerabilities of fingerprint authorization in Android apps through this 34-minute Black Hat conference talk. Delve into the concept of "Fingerprint-Jacking" and learn about practical hijacking techniques. Understand the basics of clickjacking and its application to fingerprint scanners. Discover implementation flaws in many Android apps and examine various bypass methods, including the Translucent Attack and Wrist Attack. Analyze the conditions for successful attacks and explore potential mitigation strategies. Gain insights into the security-critical nature of fingerprint scanners in mobile devices and the importance of thorough security analysis. Watch demonstrations of the discussed techniques and learn about suggested countermeasures to protect against fingerprint authorization hijacking.