Samsung Galaxy S5 Specs, Features & Price: Video Shows How to Hack S5 Fingerprint Scanner

It seems that the S5's fingerprint sensor is far from hack-proof as a newly released video from Security Research Labs shows that the security feature of the device can actually be spoofed.

The hackers made use of a fingerprint photo taken by an iPhone 4s. The method was initially used to bypass the iPhone 5s Touch ID feature but based on the video, the fake finger worked like a charm on the Samsung Galaxy S5 as well.

The video demonstrates how a hacker could actually make use of the fake finger to gain access to the phone. Even more, the hacker also showed how one could potentially access PayPal accounts of would-be victims, allowing countless transaction possibilities.

"Perhaps most concerning is that Samsung does not seem to have learned from what other have done less poorly. Not only is it possible to spoof the fingerprint authentication even after the device has been turned off but the implementation also allows for seemingly unlimited authentication attempts without ever requiring a password. Incorporation of fingerprint authentication into highly sensitive apps such as PayPal gives a would-be attacker an even greater incentive to learn the simple skill of fingerprint-spoofing," the narrator said in the video.

PayPal has reached out to BGR, saying:

"While we take the findings from Security Research Labs very seriously, we are still confident that fingerprint authentication offers an easier and more secure way to pay on mobile devices than passwords or credit cards. PayPal never stores or even has access to your actual fingerprint with authentication on the Galaxy S5. The scan unlocks a secure cryptographic key that serves as a password replacement for the phone. We can simply deactivate the key from a lost or stolen device, and you can create a new one. PayPal also uses sophisticated fraud and risk management tools to try to prevent fraud before it happens. However, in the rare instances that it does, you are covered by our purchase protection policy."

The Samsung Galaxy S5 was released earlier this month as an IP67 certified water and dust resistant phone with PayPal-certified fingerprint sensor. The smartphone is tagged $199.99 at AT&T with a 2-year contract.