https://blackwinghq.com/tags/tls/Blackwing Intelligence provides high-end security engineering, analysis, and research services for engineering focused organizationsenTue, 21 Nov 2023 00:00:00 +0000https://blackwinghq.com/research/projects/a-touch-of-pwn/Tue, 21 Nov 2023 00:00:00 +0000https://blackwinghq.com/research/projects/a-touch-of-pwn/Microsoft's Offensive Research and Security Engineering team asked us to evaluate the top three fingerprint sensors used for Windows Hello. We bypassed fingerprint authentication on all three laptops. The BlueHat talk and the write-up.https://blackwinghq.com/research/talks/a-touch-of-pwn/Wed, 11 Oct 2023 00:00:00 +0000https://blackwinghq.com/research/talks/a-touch-of-pwn/Microsoft engaged us to evaluate the security of the top fingerprint sensors used for Windows biometric authentication. This presentation details our vulnerability research process, which entailed extensive reverse engineering of software and hardware, breaking cryptographic implementation flaws in a custom TLS, and deciphering and reimplementing proprietary protocols, to go from very little knowledge about biometric authentication to a full bypass of Windows Hello authentication on all three of our research targets.