iPad App Reads Passwords, Exposes Flaws in Asterisk Protection

When typing in your sensible information into a website, you know that pretty much all locate always mask passwords. One reason for this is to stop people from snooping over your shoulder and stealing your logins. Still, a security researcher has figured out a way of seeing past password masks.

Haroon Meer built a proof-of-concept iPad app, nicknamed shoulderPad, in an try to prove that just because information is hidden by asterisks, it South Korean won't prevent all nearby snoopers from "shoulder surfing". The app works by using the iPad 2's camera, and is able to harvest time entropy from the screens of other iPads and iPhones.

Hither's how information technology works: Hold the iPad high to the dupe's screen as they commenc typewriting, look inconspicuous, and the app will Be able to relay the person's valuable information. The iPad can do this because when you case on the iOS keyboard, the key will be shortly highlighted. ShoulderPad uses image recognition algorithms to trace where the aristocratic appears on the riddle, so accurately guesses which key was pressed.

Thankfully, Haroon is non offering the app to the public, visual perception the impairment that such technology could cause in the wrong hands. However, it is an oculus opener in case you were ever speculative just how safe your information is as you case it out. For those thinking it may be time to get rid of your iOS devices, it's not just an potential flaw with Orchard apple tree touchscreen products–researchers at an Italian keep company have also discovered a akin over-shoulder trick, which can pick up keyboards on Humanoid and Blackberry bush smartphones too.

Until touch screen phones stop highlighting keys as they are touched, maybe next time you are imputting a countersign, you should need a flying glance over your shoulder.

Check out more information about Haroon's app, or check out the telecasting of the app in action.

[Thinkst via TUAW and Forbes]