Live data from Hacker News

Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

motherboard.vice.com

31–40 of 69 posts

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#31
Really interesting work. Snippet from the paper's summary for the lazy:

> The proposed method [...] is based on training a Generative Adversarial Network on a set of real fingerprint images. Stochastic search [...] is then used to search for latent input variables to the generator network that can maximize the number of impostor matches as assessed by a fingerprint recognizer.

So I hadn't heard about "MasterPrints"; the idea that there are fingerprints (synthetic or otherwise) that just happen to have a lot of false matches. That's not intuitive, at least for people like me who know nothing about fingerprint matching algorithms.

Also an interesting application of GANs.

As noted, this research was done in software. I'm not sure if you can apply something similar to physical sensor hardware. Especially since you only get a couple attempts on real hardware before most phones lock out to your pin code. And attacking real hardware would require either A) some kind of physical fingerprint simulator to interface with the sensor or B) opening the phone to get direct access to the I/O (which might then fall afoul of tamper detection, if such a thing exists on phones). But it's cool research regardless.

Now I'm curious if similar techniques can be applied to faces. Are there "MasterFaces"? Do some people have faces that generate more false positives than others?

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#32

There actually is no proof that finger prints are unique. Last time I looked into it. The same goes for DNA.

How could DNA be non-unique, except for identical twins or clones?

There's a 1 in 2^46 chance that siblings born separately will have mostly identical DNA, minus a few random mutations.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#33
post #6
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code. Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly inc…

Switching to Face ID was an enormous improvement for me. Like 99% success, with no special effort, vs 50% at best even if I remembered to wipe the touch sensor first.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#34
post #25

Earlier quoted context omitted.

Here is the paper on arxiv: https://arxiv.org/abs/1705.07386

So the experiment is done against VeriFinger [1], which seems like a software solution for fingerprint identification. No actual device is used in the paper, and I assume it is less sophisticated then Apple Touch ID or something. [1] https://www.neurotechnology.com/verifinger.html

> I assume it is less sophisticated then Apple Touch ID or something

Why?

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#35
post #6
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code. Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly inc…

I’ve found the faceid to be a massive upgrade over the touchid.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#36
post #25

Earlier quoted context omitted.

So the experiment is done against VeriFinger [1], which seems like a software solution for fingerprint identification. No actual device is used in the paper, and I assume it is less sophisticated then Apple Touch ID or something. [1] https://www.neurotechnology.com/verifinger.html

> I assume it is less sophisticated then Apple Touch ID or something Why?

[deleted]

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#37
Personally, I'm not at all surprised something like this can exist. We know object-recognizing neural networks have issues like this, why shouldn't fingerprint readers? It seems obvious that advanced, semi-opaque maths like what's in a fingerprint reader will have strange and unpredictable failure modes.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#38
post #6

Earlier quoted context omitted.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code. Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly inc…

Switching to Face ID was an enormous improvement for me. Like 99% success, with no special effort, vs 50% at best even if I remembered to wipe the touch sensor first.

I'm waiting for Apple to come out with a small version of the X, then I will switch for sure. I am really annoyed about this trend towards huge phones. I definitely regret getting the 8+.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#39
post #25

Earlier quoted context omitted.

So the experiment is done against VeriFinger [1], which seems like a software solution for fingerprint identification. No actual device is used in the paper, and I assume it is less sophisticated then Apple Touch ID or something. [1] https://www.neurotechnology.com/verifinger.html

> I assume it is less sophisticated then Apple Touch ID or something Why?

Maybe "less sophisticated" is overreaction but I thought that because there is no dedicated hardware setup that can contribute to better accurarcy/security.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#40
post #30

Earlier quoted context omitted.

There are no proofs of any kind about the natural world. However, it could be shown with a small population sample that fingerprint and dna signatures from the respective technologies are statistically unique.

So, for fingerprints, have actual similarity studied been performed on a sample size large enough to draw conclusions about the test of the population?

There’s a long history of fingerprint identification in law enforcement. That’s a far bigger sample size than any academic study could hope for.

On the other hand, the issue here seems to be less about how unique fingerprints are, and more about how unique the machine’s reading of a fingerprint is. That has more to do with the machine than the biology.

Post reply on HN