Fingerprints can be hacked

Post by SEJeff » Mon, Nov 22, 2021, 9:13 PM UTC

avianlyric wrote: post #99

amalcon wrote: post #35

Earlier quoted context omitted.

I've always disliked this breakdown. My body is something I have -- it's just potentially (not always practically -- see the article) more difficult to clone or otherwise use without my consent than a key fob or something. Edit: To be clear, I don't think this is an argument for biometrics, but rather an argument against them. They can't complement something I have in a two factor scheme, because my biometrics are so…

Your body isn’t very easy to replace. Passwords and devices are.

Post by imwillofficial » Mon, Nov 22, 2021, 9:14 PM UTC

alasdair_ wrote: post #220

Spivak wrote: post #107

Earlier quoted context omitted.

This meme really really has to die. It's so annoying that it's spread so far. Biometric security (i.e something you are) does not need to be secret nor revoked. That's the entire point . It's a piece of information that even when it's known by everyone still can't be reproduced. The strength of a security system based on biometrics is exactly how well that system can detect that it's reading from an living breathing…

>- Perfect: A human guard manually taking a fingerprint reading. Can't be beat because the guard can obviously see that it's not really your hand. "Perfect" is too strong a statement. This is only true if the guard very carefully checks every fingertip to ensure nothing is glued over your normal fingertips, and even then it's possible to distract the guard or rush them with a socially-engineered premise. Or just brib…

Post by imwillofficial » Mon, Nov 22, 2021, 9:21 PM UTC

DennisP wrote: post #196

js4ever wrote: post #8

Earlier quoted context omitted.

Even for that it's not safe if anyone can bypass it with a $5 trick. It's definitely a thumb idea

> definitely a thumb idea Four hours have gone by without comment on this and I feel the offense should be recognized.

Post by mdp2021 » Mon, Nov 22, 2021, 9:31 PM UTC

IshKebab wrote: post #235

mdp2021 wrote: post #210

Earlier quoted context omitted.

It seems you are stating that fingerprints do not identify an account holder. You should justify the statement.

No, I'm stating that fingerprints to not have the same security and privacy properties as usernames. Therefore they are not equivalent to usernames. * Usernames can be changed. Fingerprints can't. * Usernames can be denied. Fingerprints can't. * Usernames are zero effort to copy. Fingerprints require some skill and effort (if you have a decent fingerprint reader). * People are happy to share usernames online. Fingerp…

Post by aezell » Mon, Nov 22, 2021, 9:38 PM UTC

ampdepolymerase wrote: post #179

yeetaccount2 wrote: post #10

Earlier quoted context omitted.

I’m waiting on a court case with a fingerprint as key evidence for conviction, in which the defendant brings this up. Might not pass reasonable doubt muster, but what if somebody sold fingerprint forgery kits online that made it push-button simple? Just supply an image or two, run it through some ML to reconstruct the print, laser etch a latex glove or similar… I wonder if you could use CRISPR or “lab-grown meat” tec…

Why in the world would you need CRISPR or lab grown meat? Just sequence the DNA and send it off to a DNA assembly service. The price is a couple hundred bucks a pop. You don't have to replicate the entire DNA, just the segments used for forensic PCR. (On a side note, the state of biotechnology and life science knowledge on HN is utterly deplorable, repeating buzz words does not reality make.)