Slashdot Mirror

>"Fake Fingerprints Can Imitate Real Ones In Biometric Systems, Research Shows"

Which is one of MANY reasons why fingerprints should not be used for "real" security- it isn't really secure.

Further, using fingerprints (or worse, DNA) and allowing a third-party to have access to that data is unacceptable. Not only because the government and big business should have no need to indiscriminately track what people are doing all the time but because they should not have fingerprint registration data (which will be horribly abused) .

Stand up for your rights (and the rights of your children and future generations). Once you give this data to the government or big business, it will NEVER be erased or restricted, regardless of claims, policies, or laws- it will go into huge databases and shared between agencies and used however they want for as long as they want. Even worse, with every crime investigation, you will be searched without probable cause. It is a genie that can't be put back into the bottle.

Fingerprints are something you leave all over the place all the time. They are easy to lift, copy, and forge. Easy to fake, easy to use to frame people. Time after time they have been shown to be poor for security and yet very effective at tracking people.

DNA is even worse. Like fingerprints, you leave it all over the place all the time. Samples can be lifted and planted and analyzed. DNA is more than a means to ID, it contains very sensitive information about you.

Iris scan is better than DNS or fingerprints- there is no leaving your iris image all over, and it doesn't say that much about you. But your eyes (iris, not retinal) could be scanned without your permission by any high resolution camera pointed at your face, even your own phone.

There is only one safer and practical biometric I know of right now- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have
to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example/info: http://www.m2sys.com/palm-vein... https://www.imprivata.com/why-...

Now, it might not be suitable for phones, but for anything else that requires real security (and privacy as a major bonus), I think deep vein palm scan is a great idea.

Fingerprints and DNA should not be used for biometrics. Period.

Using fingerprints or DNA and allowing a third-party to have access to that data is unacceptable. Not only because the government and big business should have no need to track what people are doing but because they should not have fingerprint registration data (which will be horribly abused) .

Stand up for your rights, people... and the rights of your children. Once you give this data to the government or big business, it will NEVER be erased or restricted, regardless of claims, policies, or laws- it will go into huge databases and shared between agencies and used however they want for as long as they want. Even worse, with every crime investigation, you will be searched without probable cause. It is a genie that can't be put back into the bottle.

Fingerprints are something you leave all over the place all the time. They are easy to lift, copy, and forge. Easy to fake, easy to use to frame people. Time after time they have been shown to be poor for security and yet very effective at tracking people.

DNA is even worse. Like fingerprints, you leave it all over the place all the time. Samples can be lifted and planted and analyzed. DNA is more than a means to ID, it contains very sensitive information about you.

Iris scan is better than DNS or fingerprints- there is no leaving your iris image all over, and it doesn't say that much about you. But your eyes (iris,
not retinal) could be scanned without your permission by any high resolution camera pointed at your face, even your own.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...
More info: https://en.wikipedia.org/wiki/...

We also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not. You should not have to positively ID yourself for ALL transactions. A good example is age verification. There is an important place for anonymity and semi-anonymity in a free society.

Using fingerprints and allowing a third-party to have access to that data is unacceptable. They can be used to track what people are doing and require registration data (which will be horribly abused) .

Stand up for your rights, people... and the rights of your children. Once you give this data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between businesses and agencies and used however they want for as long as they want. Even worse, with every crime investigation, you will be searched without probable cause.

Fingerprints are not foolproof and not a positive ID.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...
More info: https://en.wikipedia.org/wiki/...

The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not.

and iris scans are an improvement, but there is something better (faster, cheaper, less abuse potential)...

Using fingerprints and allowing third-parties and governments to have access to that data is unacceptable. Not only because the government should have no need to track what people are doing but because the gov should not have fingerprint registration data (which will be horribly abused) . Once you give this data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between all agencies and used however they want for as long as they want. Even worse, with every crime investigation, you will be searched without probable cause.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, sanitary, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...
More info: https://en.wikipedia.org/wiki/...

Regardless, we also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not. Anonymous purchasing and traveling should be a right, not a harassment.

>"With a $100m budget, it has begun the search for technology companies that could provide biometric systems, such as facial, iris and fingerprint recognition."

The gov should not have fingerprint registration data (which will be horribly abused). Facial and iris are not good choices either...

There is only one safe and practical biometric I know of- deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...
https://en.wikipedia.org/wiki/...

Stand up for your rights, people... and the rights of your children. Once you give fingerprint or DNA data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between all agencies and used however they want for as long as they want. Even worse, with every crime investigation, you will be searched without probable cause.

>"Iris scanning is increasingly being used for biometric identification because it's fast, accurate, and relies on a body part that's protected and doesn't change over time. "

Not really. It is a rather stupid biometric, especially when something exists that is far better in just about every way....

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can (and possibly iris scans). You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

But we also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO, where we go, what we buy, who we talk with, WHO WE ARE. The first step in securing freedom is privacy and often means anonymity. When you are identified and tracked, you are losing your freedom, whether you realize it or not.

The only biometric signature hardware that I've seen that I would consider seriously difficult to spoof would be the deep-vein reader:

http://www.fujitsu.com/us/solu...
http://www.m2sys.com/palm-vein...

They use "Palm Vein Authentication" and this seems like it would be really, really tough to trick. I think it would be very hard to recreate the sensor signature, probably harder than a retinal scan.

>"Biometrics, however, are biologically unique to the individual; therefore, once compromised, the individual has no recourse, [and] is at heightened risk for identity theft."

Which is why fingerprints should never be used for biometrics.

Using fingerprints and allowing a third-party to have access to that data is unacceptable. Fingerprints are left everywhere and can be collected and accessed without your permission. Once collected, that data will NEVER be erased or restricted, regardless of claims or laws. They will like go or leak into huge databases and shared between various government agencies and used however they want for as long as they want. With every crime investigation, you will be searched without probable cause.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of the biometric all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

We all need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. And you can't trust latent biometrics with security.

If they make it required, I guess I will never visit Japan. Fingerprints should not be used for biometrics. Period.

Using fingerprints and allowing a third-party to have access to that data is unacceptable. Not only because the government should have no need to track what people are doing but because the gov should not have fingerprint registration data (which will be horribly abused) . Every time a national database is searched, if your data is in there, you are being searched without probable cause.

Stand up for your rights, people... and the rights of your children. Once you give this data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between all agencies and used however they want for as long as they want.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

But we also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not.

>"To enroll in TSA's Precheck registration program, travelers must pay $85 to $100 every five years, then submit to a background check, in-person interview at an airport, and to being fingerprinted. "

Yeah, because I am really going to submit to being FINGERPRINTED so I can be searched without probable cause EVERY single time they run anybody's prints for ANY reason from ANY agency. I think not. Totally unacceptable.

Fingerprints should not be used for biometrics. Period. Once you give this data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between all agencies and used however they want for as long as they want.

If they really need a biometric for this "feature" of security, there is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

But we also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not. And the whole TSA security theater is a scam on everyone.

Fingerprints should not be used for biometrics. Period.

Using fingerprints and allowing a third-party to have access to that registration data and tracking information is unacceptable. Once you give this data to the government or big business, it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between entities and agencies and used however they want for as long as they want.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

This technology could be put in portable devices like phones by simply including an IR camera. It won't be as fast/small/close as using fingerprints, so it won't be as convenient. But safety, privacy, and security are diametrically opposed to convenience.... it is worth it.

This is unacceptable. Not only because the Fed should have nothing to do with this. And not only because the gov really shouldn't need to track which people are participating or even possibly what they are eating. But because the gov should not have fingerprint registration data (which will be horribly abused) .

Stand up for your rights, people... and the rights of your children. Once you give this data to the government (or big business), it will NEVER be erased or restricted, regardless of claims or laws- it will go into huge databases and shared between all agencies and used however they want for as long as they want.

There is only one safer and practical biometric I know of- that is deep vein palm scan. That registration data cannot be readily abused. It can't be latently collected like DNA, fingerprints, and face recognition can. You have to know you are registering/enrolling when it happens. You don't leave evidence of it all over the place. When you go to use it, you know you are using it every time. And on top of all that, it is accurate, fast, reliable, unchanging, live-sensing, and cheap. If you must participate in a biometric, this is the one you should insist on using.

Example: http://www.m2sys.com/palm-vein...

But we also need to realize that IT IS NOT EVERYONE'S BUSINESS WHAT WE ALL DO. The first step in securing freedom is privacy. When you are tracked, you are losing your freedom, whether you realize it or not.

Yes, I totally understand your reasoning. Full disclosure - I actually co-own a biometrics technology firm. We support two types of vascular biometric readers: The palm vein reader from Fujitsu and the finger vein reader from Hitachi. Neither of these devices also capture fingerprints. Check them out if you are interested and I'm happy to answer any questions about biometrics.

Yes, I totally understand your reasoning. Full disclosure - I actually co-own a biometrics technology firm. We support two types of vascular biometric readers: The palm vein reader from Fujitsu and the finger vein reader from Hitachi. Neither of these devices also capture fingerprints. Check them out if you are interested and I'm happy to answer any questions about biometrics.