Firgerprints are usernames, not passwords.
Fingerprints can be hacked
161–170 of 333 posts
Re: Fingerprints can be hacked
#162Earlier quoted context omitted.
> State driver license in USA In which states? The only thing I have been fingerprinted for is in the US is The Global Entry program.
I've only had a state issued driver's license in CA and TX, and both require thumb prints. But I'm sure if you were truly interested, you could search the web for that information fairly quickly, actually probably faster than it took to post the question to HN: https://duckduckgo.com/?q=which+states+require+thumb+print+f...
My intent wasn't to find out which states require prints, it was to drive conversation in order to refute the claim that state driver licenses are honeypots for fingerprints.
Fingerprints are not required as a part of Real ID implementation. Real ID seems like it would be the main driver for feature parity between licenses of different states. If fingerprints aren't required by Real ID, then it seems like it would be incorrect to assume that all states require fingerprints - and thus also incorrect to assume that driver licenses in the USA are used as honeypots for fingerprints.
Perhaps landemva should have specified which states are using driver licenses as honeypots for collecting fingerprints?
Re: Fingerprints can be hacked
#163Earlier quoted context omitted.
> State driver license in USA In which states? The only thing I have been fingerprinted for is in the US is The Global Entry program.
More and more states require fingerprints for driver licenses because of the RealID program. Eventually (soonish) you won't be able to use your driver license to fly without it being RealID compliant. One state I lived in gave me the option of not having a RealID-compliant license if I wanted to. Another didn't, so fingerprints were compulsory.
As far as I can tell, Real ID does not require fingerprints, only digital color images of the face[0].
[0] https://www.biometricupdate.com/202101/real-id-law-quietly-p...
Re: Fingerprints can be hacked
#164My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
How the heck did they get the fingerprint from that? Is there actually tech to enhance blurry images like that?
Re: Fingerprints can be hacked
#165My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
How the heck did they get the fingerprint from that? Is there actually tech to enhance blurry images like that?
iirc they had a waiter as a conspirator serving that guy at a banquet
Re: Fingerprints can be hacked
#166My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
How the heck did they get the fingerprint from that? Is there actually tech to enhance blurry images like that?
They used several close range photos, not the one in the article.
Re: Fingerprints can be hacked
#167My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
Pin/password can also be hacked and there is no need for fancy 3D printer. Someone can use their smartphone to film other person as they type stuff in, no need for printing fake print. They can steal phone/laptop as soon as they are done filming. This is the case that fingerprint sensors are preventing. Pointing out problems is useless - as people don't have alternative that would be "all-mighty secure without flaws"…
> This is the case that fingerprint sensors are preventing.
They aren't. Your parent post already mentioned that they were extracted by filming.
Passwords don't have the other 2 problems, and I'm not really sure what is gained by not talking about them.
Re: Fingerprints can be hacked
#168Earlier quoted context omitted.
And they distributed it with the Datenschleuder. Cannot remember the issue, but I have it still somewhere at home. It is like a highly distributed backup of that fingerprint.
State driver license in USA is a honey pot of thumb/finger scans. Anyone on HN think the NSA doesn't have access? NSA info sharing with trusted foreign countries makes a reliable distributed backup for use by foreign spooks.
[deleted]
Re: Fingerprints can be hacked
#169My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
How the heck did they get the fingerprint from that? Is there actually tech to enhance blurry images like that?
It says several images were used. You can't generate a correct fingerprint from that blurry fingerprint picture. The data has to exist in order to reproduce it.
Re: Fingerprints can be hacked
#170Earlier quoted context omitted.
I've only had a state issued driver's license in CA and TX, and both require thumb prints. But I'm sure if you were truly interested, you could search the web for that information fairly quickly, actually probably faster than it took to post the question to HN: https://duckduckgo.com/?q=which+states+require+thumb+print+f...
My intent wasn't to find out which states require prints, it was to drive conversation in order to refute the claim that state driver licenses are honeypots for fingerprints. Fingerprints are not required as a part of Real ID implementation. Real ID seems like it would be the main driver for feature parity between licenses of different states. If fingerprints aren't required by Real ID, then it seems like it would be…
Particularly since it's only being done in four states. That explains why I'd never heard of the practice.