Fingerprints can be hacked
blog.kraken.com
Fingerprints can be hacked
1–10 of 333 posts
Re: Fingerprints can be hacked
#2My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security.
https://www.dw.com/en/german-defense-minister-von-der-leyens...
-
The core problems with biometrics are that:
1) Not revokable (unlike compromised credentials)
2) Not a secret
3) Usually trivial to reproduce and spoof (even "liveliness" tests)
Re: Fingerprints can be hacked
#3Fingerprints are usernames, not passwords. Here is an excellent (and timeless) post on this fact:
https://blog.dustinkirkland.com/2013/10/fingerprints-are-use...
Re: Fingerprints can be hacked
#4> you leave your fingerprint on taxi doors, iPhone screens, and glasses of wine at your local restaurant.
DNA is similar - you leave hairs in taxis, public toilets, etc.
Re: Fingerprints can be hacked
#5My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
That's why this is a dumb idea, merchants can just use the replay attack: https://www.wsj.com/articles/in-china-paying-with-your-face-....
The only place where you should be using your biometrics is to unlock devices you carry with you, like the iPhone.
Re: Fingerprints can be hacked
#6Do you think that a 3d printer can replace the whole process ?
Re: Fingerprints can be hacked
#7Fingerprints are usernames, not passwords. Here is an excellent (and timeless) post on this fact: https://blog.dustinkirkland.com/2013/10/fingerprints-are-use...
I always thought that since the beginning, but unfortunately the world went into another direction. People always said "something you have and something you know", but now for most cases it's just "something you have - your body". Obviously if in the future remote mind-readers are invented, the "something you know" part will also get obsolete, but for now we should stick to it.
Re: Fingerprints can be hacked
#8My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
That's why this is a dumb idea, merchants can just use the replay attack: https://www.wsj.com/articles/in-china-paying-with-your-face-... . The only place where you should be using your biometrics is to unlock devices you carry with you, like the iPhone.
Even for that it's not safe if anyone can bypass it with a $5 trick. It's definitely a thumb idea
Re: Fingerprints can be hacked
#9Do you think that a 3d printer can replace the whole process ?
It probably lacks the resolution to do it. That said, why do you want that when a 2d printer works fine?
Re: Fingerprints can be hacked
#10My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
I’m waiting on a court case with a fingerprint as key evidence for conviction, in which the defendant brings this up. Might not pass reasonable doubt muster, but what if somebody sold fingerprint forgery kits online that made it push-button simple? Just supply an image or two, run it through some ML to reconstruct the print, laser etch a latex glove or similar…
I wonder if you could use CRISPR or “lab-grown meat” techniques to do the same with DNA evidence…might be something that would get you a contract with the CIA/NSA.