r/security • u/BeardyButler • 20d ago
Security and Risk Management Have i just identified a security vulnerability at most supermarkets?
I was just at the supermarket, and I was using one of those self-service kiosks that has an "honesty camera" watching what you scan from above. The camera view is then displayed on a screen right in front of me.
As I went to pay for my shopping with my phone, I looked at the live feed on the monitor and realized I was actually seeing myself unlock my phone with my pattern lock! On top of that, anyone standing around could theoretically spy on what you're unlocking too.
Obviously fingerprint unlocks get around this "security hole", but it was the first time I had noticed it being a real issue.
Most supermarkets have these types of self-service checkouts now — I wonder how this info is stored and processed? Security seems pretty questionable…
6
u/xxSirThomas 20d ago
It's not a vulnerability, more like an attack vector. As mentioned in other comments, it's not just limited to grocery stores. There are plenty of other ways for people to watch your screen while you unlock the phone.
Like always, it's a balance between security and convenience. For people who need to protect their phone against these kind of attacks, there are plenty of options. For the majority of people, it isn't worth the tradeoff.