Live data from Hacker News

Ask HN: Does airport fingerprinting compromise my biometric security?

news.ycombinator.com

21–30 of 73 posts

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#21

In India the entire population gave their fingerprint to the government via a massive program called Aadhaar! [1] This is mandatory for bank accounts, sim cards and what not. So its practically unlivable without Aadhaar these days. [1] https://uidai.gov.in/en/

There was also some (unconfirmed) news article that the whole database is for sale like $5 with millions of records. So if that was true, you can unlock almost any Indian persons phone!

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#22

The only time I have used fingerprints for flights is for bag drop. That is, the fingerprint verifies that the same person dropping the bag is the one that later boards the flight. In that scenario the fingerprint is not needed after that, and I'm sure there is no regulatory permission to store biometric data for any longer period of time than necessary, which is only until the plane leaves. I haven't seen these syst…

In which country was that? You mention GDPR, but I've not seen it in the ~10 EU countries I've used airports in in the last few years.

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#23
Probably not worth worrying strictly about the info gathered by airport security unless you're a person of interest, either to that nation or it's allies. If you're that interesting to whoever, all bets are off. Plenty of other ways to get info off phone.

FWIW I really don't recommend just fingerprint for phone access. You can change a PIN if someone else gets a hold of it, there's not much you can do to change your fingerprints.

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#24
> Does airport fingerprinting compromise my biometric security?

Access by a criminal? probably not much - if they can get physical access to your phone, access to your fingerprint by social manipulation or threat isn't that hard.

Access by government agency that confiscates your phone? theoretically yes, but no more than using printed fingerprints on an arrest record or lifted from your home and printed so they can be used on your phone.

Access by a local sheriff/corrupt cop? a lot of hassle compared with getting access to your finger

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#25

In India the entire population gave their fingerprint to the government via a massive program called Aadhaar! [1] This is mandatory for bank accounts, sim cards and what not. So its practically unlivable without Aadhaar these days. [1] https://uidai.gov.in/en/

It's not just the fingerprints, they have the scan of the retina for the entire population.

It's a disaster waiting to happen.

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#26

Probably not worth worrying strictly about the info gathered by airport security unless you're a person of interest, either to that nation or it's allies. If you're that interesting to whoever, all bets are off. Plenty of other ways to get info off phone. FWIW I really don't recommend just fingerprint for phone access. You can change a PIN if someone else gets a hold of it, there's not much you can do to change your…

Though the traveler may not be particularly interesting, their employer’s trade secrets or database access might be up there.

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#28

In India the entire population gave their fingerprint to the government via a massive program called Aadhaar! [1] This is mandatory for bank accounts, sim cards and what not. So its practically unlivable without Aadhaar these days. [1] https://uidai.gov.in/en/

There was also some (unconfirmed) news article that the whole database is for sale like $5 with millions of records. So if that was true, you can unlock almost any Indian persons phone!

If I have their biometric data I'm going to hack their bank not their phone

Re: Ask HN: Does airport fingerprinting compromise my biometric security?

#30

Earlier quoted context omitted.

There was also some (unconfirmed) news article that the whole database is for sale like $5 with millions of records. So if that was true, you can unlock almost any Indian persons phone!

If I have their biometric data I'm going to hack their bank not their phone

which can be most easily hacked by hacking their phones first
Post reply on HN