International. The fingerprint device access control of the popular Samsung Galaxy S10 smartphone can be circumvented by connecting certain accessories to the device, Forbes reports.
Last April, Samsung had to implement a biometric security software patch to address performance issues. Android Central reported earlier this year that some screen protectors prevent the ultrasonic fingerprint sensor from working, as any space between the protector and the display could disrupt the transmission of the ultrasonic signal.
Now, an accessory manufacturer has developed a cheap gel protector that seems to solve the problem by recording users' fingerprints, meaning that once the device has been used by the device's owner, anyone can impersonate their biometrics by simply pressing on the sensor area. In addition to the security issue this creates for device access, it also applies to all accounts and apps that are protected with biometric fingerprint data.
The owner of the UK's Samsung Galaxy S10, Lisa Neilson, told The Sun that when a $3 screen saver she bought on eBay seemed to effectively bypass the fingerprint sensor, she called Samsung's customer service. A Samsung customer service representative took the remote control of the phone, examined its settings, and admitted that the problem appears to be a breach. Neilson says the representative then told him that a person from another department would contact them as part of an investigation, but that contact hasn't happened yet.
Samsung says it is conducting an internal investigation and advises Galaxy S10 owners to make sure they use the company's authorized products that are specifically designed for their devices.
