Live data from Hacker News

Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

motherboard.vice.com

1–10 of 69 posts

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#2
> Biometric IDs seem to be about as close to a perfect identification system as you can get.

This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#4
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

I think you need to read that sentence with emphasis on "seem". They make this clear two sentences later:

> In recent years, however, security researchers have demonstrated that it is possible to fool many, if not most, forms of biometric identification.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#5
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

I don't know where I read it, but it always stuck to me:

identification is more like a username, not a password, and should be used as such.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#6
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code.

Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly increased false negatives. If my print is recognized less than half the time I'm just going to disable the feature.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#7
post #6
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code. Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly inc…

I didn't use it on my 5S, and thought FaceID and the fingerprint reading on the touch bar was very gimmicky until I got both of them. Now I can barely imagine living without them, unsafe or not.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#8
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

What did you expect. This is on vice.com. A sensationlist ajenda pushing entertainment news site.

Why things posted from vice, vox and the likes are always shwoing up on HN I will never know.

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#9
post #6
post #2

> Biometric IDs seem to be about as close to a perfect identification system as you can get. This seems a massive assertion that’s not qualified at all in the article. It was my understanding that biometrics in consumer hardware have always been easily circumvented and are largely about convenience.

And honestly they're not that convenient. The Touch ID in my iPhone 8+ rejects my print at least a dozen times a day. On some days it rejects it many times in a row, forcing me to key in my unlock code. Research like this, while ostensibly threatening an increase in false positives (due to unauthorized use of fake prints), will in all likelihood cause vendors to tighten the confidence interval, leading to greatly inc…

Sounds like you should maybe retrain it. My iPhone 6, which has the older sensor tech is fine: unless my hands are wet

Re: Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones

#10
Not enough detail in the article. There is no discussion of what sensors were used to "fool". Now everyone will assume it works on all actual devices using fingerprints, yet there is no information to support that conclusion. If this technique were applied to actual devices (with fingerprints not included in the study) and it worked reliably, then this would be a meaningful study.
Post reply on HN