Fun with Fingerprint Readers
Two pieces of news that came in today make a fun counterpoint to each other. First, a grocery chain is trying out a biometric checkout system. Bring your groceries, pay with a fingerprint. Unfortunately, a story in Bruce Schneier's monthly newsletter notes that fingerprint scanners can be fooled with a bit of gelatin.
Can I buy the Gelatine at the Store and use it to falsely pay for my groceries? How convenient! :)
'mmmmmmmmm.... forbidden donut'
Bill Cosby... As a security consultant? Yikes.
Wow, this is a much better solution than I've been using, and much less bloody.
Need Free Juniper/NetScreen Support? JuniperForum
Macgyver did this with a glass and some candle wax :)
(B) + (D) + (B) + (D) = (K) + (&)
"His more interesting experiment involves latent fingerprints. He takes a fingerprint left on a piece of glass, enhances it with a cyanoacrylate adhesive, and then photographs it with a digital camera. Using PhotoShop, he improves the contrast and prints the fingerprint onto a transparency sheet. Then, he takes a photo-sensitive printed-circuit board (PCB) and uses the fingerprint transparency to etch the fingerprint into the copper, making it three-dimensional"
Bah! Too much work - I just wanna shape shift ala Mystique!
tsutomu@mlab.jks.ynu.ac.jp
someone is going to find a whole shitload of emails tomorrow morning
I'm heading for Krogers and buying me a life time supply of caffine and HoHo's!
Never answer an anonymous letter. - Yogi Berra
On the other hand, if a biometric database is compromised, you lose the integrity of a part of your body. This means someone can now use tricks like the gelatin one outlined here to impersonate you. But you can't get another body. You can't revoke the compromised data.
Well, I've got ten fingers and ten toes. That makes me good for twenty lost body parts, if I can get my foot up onto the checkout without straining my groin.
Yours Sincerely, Michael.
Ban gelatin.
Whatever for?
So you can snarf hisfingerprints, hmm?
First, nothing begins if not opening