Web Hack List

Collected research

Stealing PINs via Mobile Sensors: Actual Risk versus User Perception

PINlogger.js reads a phone motion and orientation sensor streams from an ordinary web page, with no permission prompt, and feeds them to a neural network that infers the PIN being typed. It named the right PIN out of fifty on the first guess 74 percent of the time and 94 percent within three, while user studies show people rank these sensors as low risk.

Record

Published by
York Research Database
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of York Research Database, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .