Samsung admits fingerprint reader flaw, promises software fix

A PR nightmare for Samsung, far worse than the FaceID ‘twins‘ problem. This case highlights the need to have a security mindset (“I wonder what happens if I do this…”) during product development, or at the very least engage some cynical field testers before signing off the product for launch. We see a lot of articles about DevSecOps for the software development lifecycle (SDLC), what about introducing DevSecProd for product development?…:

Samsung has promised to provide a software update to fix the glaring security issue that allows users to bypass the fingerprint reader through using third-party screen protectors.

[…]

Original Article