This should not be news to anyone. Chaos Computer Club demonstrated almost the same technique in this 2006 video https://www.youtube.com/watch?v=OPtzRQNHzl0
Yeah, this isn't new. It's just cheaper.
Fingerprints can be hacked
21–30 of 333 posts
Re: Fingerprints can be hacked
#22Do you think that a 3d printer can replace the whole process ?
It probably lacks the resolution to do it. That said, why do you want that when a 2d printer works fine?
FDM printers probably don't have a high enough resolution, but I wonder if new high resolution resin printers like the phrozen sonic 8k mini ($600) have a high enough resolution to do it.
Re: Fingerprints can be hacked
#23The broader argument here is less about fingerprints, and more about using anything immutable as authentication. You cannot change your fingerprints. You cannot change your social security number (at least not easily). These should therefore, NEVER be a primary method to authorize access to anything. Once stolen, the proverbial horse is out of the barn.
Re: Fingerprints can be hacked
#24My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
> Spiegel also reported another security hole from the conference: reading a user's PIN code from reflections in their pupils while taking selfies.
https://www.dw.com/en/german-defense-minister-von-der-leyens...
Re: Fingerprints can be hacked
#25My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
And they distributed it with the Datenschleuder. Cannot remember the issue, but I have it still somewhere at home.
It is like a highly distributed backup of that fingerprint.
Re: Fingerprints can be hacked
#26Fingerprints are usernames, not passwords. Here is an excellent (and timeless) post on this fact: https://blog.dustinkirkland.com/2013/10/fingerprints-are-use...
Secrecy is only an approximation of difficulty. Given the difficulty, I would estimate it as a two character password. It should be fine for people who have nothing to hide.
> It should be fine for people who have nothing to hide.
There are no people that have nothing to hide. There are only people that don't know what they should be hiding.
Re: Fingerprints can be hacked
#27in biometrics this is called a Presentation Attack (PA), here the fake fingerprint is the analog of presenting a photograph, video or 3dp mask to a face recognition system. this is usually mitigated by the use of Presentation Attack Detection (PAD) systems, either hardware, software or hybrid. in this particular case it can easily be mitigated by some hardware that measures the amount of water in the biometric sample…
Would this be foiled by a latex glove printed with that fingerprint and worn to scan in?
Re: Fingerprints can be hacked
#28Biometrics are not secrets (it must be assumed that attackers always possess all biometric data), but they can nevertheless be a good form of authentication when combined with situational awareness . If you try to use one of these hot glued fingerprints in front of a security guard, it isn't going to go well for you. At the moment, humans are still necessary for situational awareness, but probably machines can get th…
You think the typical security guard would notice a print if it was glued on the finger? At workplaces I've worked at in the past they weren't watching the flow of traffic through the gate all that carefully...
Re: Fingerprints can be hacked
#29My favorite photograph of a fingerprint is when the Chaos Computer Club reproduced the German Foreign ministers fingerprint from a photo. So much for military grade security. https://www.dw.com/en/german-defense-minister-von-der-leyens... - The core problems with biometrics are that: 1) Not revokable (unlike compromised credentials) 2) Not a secret 3) Usually trivial to reproduce and spoof (even "liveliness" tests)
The title almost sounds like that they have a meaningful fingerprint ready to open her iPhone... Was that the case? Or do they have a somewhat accurate partial fingerprint? I failed to find recoding of the presentation.
Re: Fingerprints can be hacked
#30in biometrics this is called a Presentation Attack (PA), here the fake fingerprint is the analog of presenting a photograph, video or 3dp mask to a face recognition system. this is usually mitigated by the use of Presentation Attack Detection (PAD) systems, either hardware, software or hybrid. in this particular case it can easily be mitigated by some hardware that measures the amount of water in the biometric sample…
Would this be foiled by a latex glove printed with that fingerprint and worn to scan in?
the capacitive one yes probably, the two other i doubt it. sure you can always use a conductive coating as well as a material that mimic optical propreties of skin. the question is not IF a system will be spoofed, the question is WHEN.