Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fingerprints can be hacked

blog.kraken.com

Post reply on HN
Print view View original

271–280 of 333 posts

Re: Fingerprints can be hacked

#271

Post by Tagbert »

IshKebab wrote: post #235
mdp2021 wrote: post #210

Earlier quoted context omitted.

It seems you are stating that fingerprints do not identify an account holder. You should justify the statement.

No, I'm stating that fingerprints to not have the same security and privacy properties as usernames. Therefore they are not equivalent to usernames. * Usernames can be changed. Fingerprints can't. * Usernames can be denied. Fingerprints can't. * Usernames are zero effort to copy. Fingerprints require some skill and effort (if you have a decent fingerprint reader). * People are happy to share usernames online. Fingerp…

Then they are not passwords, either. They exist outside that limited model of security ID:password.

Re: Fingerprints can be hacked

#272

Post by Tagbert »

trulyme wrote: post #228
menage wrote: post #140

Earlier quoted context omitted.

On Android (don't know about iOS) you can take photos without even unlocking - double press on the power button opens the camera. You can't access anything else (including existing photos in the camera roll).

True, and it is a step in right direction. However I still don't want to expose my bank app credentials every time I show someone my vacation photos.

Why would your banks account access not require additional credentials beyond what gives access to your photos? I have an iPhone. TouchID/FaceID can give access to the photos, but to get to my bank account, I use a separate login.

Re: Fingerprints can be hacked

#273

Post by PhantomGremlin »

kurthr wrote: post #213
breser wrote: post #201

Earlier quoted context omitted.

At least on iPhones though they have a way to activate a mode that prevents the use of TouchID and FaceID. If I press the power button on my phone 5 times in a row that turns that off. Yes I still run the risk of my device being unlocked against my will if I'm caught by surprise. But I'm able to disable this functionality in places where I think the risk of that may be higher, e.g. while traveling. I'll still take th…

On modern FaceID phones you need to hold the power and down volume key to bring up the Reset/PowerOff and cancel. Just clicking multiple times will bring up wallet, siri, or do nothing.

Just clicking multiple times will bring up wallet, siri, or do nothing.

On my iPhone 13, just now, I rapidly clicked the power button 5x.

The phone immediately made a loud sound and put up a screen that said "Emergency SOS". There was an option to "cancel" it, but I assume that the phone would have contacted 911 in short order unless I quickly cancelled.

So the correct description is probably "it depends".

Re: Fingerprints can be hacked

#274

Post by MomoXenosaga »

hasmanean wrote: post #152
upofadown wrote: post #143

Earlier quoted context omitted.

Most of the evidence that shows up at a court case is forgeable. Simply showing that a particular piece of evidence could be forged in no way proves that it is forged. You would need some sort of argument to prove your contention.

All evidence is ultimately forgeable. At some point a modern day Godel could prove that “justice” in a free society is mathematically impossible. The law has to operate within a practical compromise and err heavily on the side of reducing false convictions.

https://www.techdirt.com/articles/20210312/19343046414/man-s...

That is an article I was reading today. I don't know what is wrong with America.

Re: Fingerprints can be hacked

#275

Post by cmaggiulli »

xoa wrote: post #78
SEJeff wrote: post #3

Fingerprints are usernames, not passwords. Here is an excellent (and timeless) post on this fact: https://blog.dustinkirkland.com/2013/10/fingerprints-are-use...

> Fingerprints are usernames, not passwords. Here is an excellent (and timeless) post on this fact No, that is complete absolute shit post that isn't even self coherent. Like, it literally whines about needing something that can be "independently chosen, changed, and rotated", which obviously describes usernames so obviously biometrics can't possibly be usernames by that very post! Why is this dumb meme so fucking pe…

Yea but they’re being used as authentication mechanisms….

Re: Fingerprints can be hacked

#276

Post by path411 »

AnthonyMouse wrote: post #192
ipspam wrote: post #112

Earlier quoted context omitted.

Could work for a digital intrusion, but for crime scenes there is dna

DNA evidence is overrated. People leave their DNA everywhere, so it's not that hard to get some and then plant it somewhere else. The tests also have varying accuracy rates, but people misunderstand what it means. If the test is 99.99% accurate, that doesn't mean that there is a 99.99% chance that the defendant is the perpetrator. It means that in a region with ten million people, you've whittled your suspect list do…

Yeah I always wonder when you hear like "99% DNA match!!". So like you confirmed the DNA is probably from a human?

Re: Fingerprints can be hacked

#277

Post by yeetaccount2 »

ampdepolymerase wrote: post #179
yeetaccount2 wrote: post #10

Earlier quoted context omitted.

I’m waiting on a court case with a fingerprint as key evidence for conviction, in which the defendant brings this up. Might not pass reasonable doubt muster, but what if somebody sold fingerprint forgery kits online that made it push-button simple? Just supply an image or two, run it through some ML to reconstruct the print, laser etch a latex glove or similar… I wonder if you could use CRISPR or “lab-grown meat” tec…

Why in the world would you need CRISPR or lab grown meat? Just sequence the DNA and send it off to a DNA assembly service. The price is a couple hundred bucks a pop. You don't have to replicate the entire DNA, just the segments used for forensic PCR. (On a side note, the state of biotechnology and life science knowledge on HN is utterly deplorable, repeating buzz words does not reality make.)

I’m no biologist, just seems easier to “infect” blood with someone else’s DNA than to make it from scratch.

Re: Fingerprints can be hacked

#278

Post by eftychis »

1cvmask wrote: post #2

My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)

One of my first examples. That story was ironic in so many levels.

Re: Fingerprints can be hacked

#279

Post by AnthonyMouse »

path411 wrote: post #276
AnthonyMouse wrote: post #192

Earlier quoted context omitted.

DNA evidence is overrated. People leave their DNA everywhere, so it's not that hard to get some and then plant it somewhere else. The tests also have varying accuracy rates, but people misunderstand what it means. If the test is 99.99% accurate, that doesn't mean that there is a 99.99% chance that the defendant is the perpetrator. It means that in a region with ten million people, you've whittled your suspect list do…

Yeah I always wonder when you hear like "99% DNA match!!". So like you confirmed the DNA is probably from a human?

The tests generally choose markers that tend to differ between different people rather than the ones that tend to differ between people and animals.

But even then, people use percentages as if everyone's DNA was independent. Which it isn't. Blood relatives have similar DNA.

The one thing DNA is really good for is excluding people. If you have the rapist's DNA and you accurately test it against the suspect's DNA and it doesn't match, it's not them.

Re: Fingerprints can be hacked

#280

Post by hunter2_ »

trulyme wrote: post #228
menage wrote: post #140

Earlier quoted context omitted.

On Android (don't know about iOS) you can take photos without even unlocking - double press on the power button opens the camera. You can't access anything else (including existing photos in the camera roll).

True, and it is a step in right direction. However I still don't want to expose my bank app credentials every time I show someone my vacation photos.

You're looking for "screen pinning" on Android or "guided access" on iOS. It's been around for quite a while.
Post reply on HN