Slashdot Mirror
U.S. Begins Digital Fingerprinting In Airports
lemist writes "Cross Match has rolled out digital fingerprinting at major airports in the United States according to MSNBC. It's designed to increase border security. They appear to be using Cross Match's Verifier 300 LC. Note that the actual capture of the fingerprint requires no interaction with the device. It determines when the image quality is excellent and grabs it."
What I really like is Brazil's answer to this: they are now stopping and fingerprinting and photographing all US visitors. Tit-for-tat, the way it should be. And it wouldn't at all stop me from visting Brazil, just as it probably won't stop many Brazilians from coming here.
- I love animals. I try to eat at least one a day.
There's only one major difference between Facist dictatorships and Communist dictatorships -- does the government own and control all industry (Communist) or is it controlled by a few private citizens who are close friends with the administration (Facist)? The methods of control and the usurping of democracy work the same no matter what econmics lie behind your totalitarian system whether we arrive there through bloody revolution like the Soviets or warmongering, security obsession like the Nazis.
(Yeah, yeah, f--- Godwin's Law. Remove the racist purges and replace zealous worship with apathetic inaction by the masses and you've got a good model of where we could be going if Bush were honestly an evil man instead of being mostly misguided. Read German history. The parallels are terrifying, and yet reassuring in that we did not step off that chasm that presented itself so many times.)
If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
Good for you! I personally don't have the need or desire for lethal weapons likely to be used to commit crimes. All I'd like is to visit my American friends and see more of your beautiful country.
Says Anonymous Coward. Anyone else see the irony of the situation here? Anyway, I will think long and hard before visiting the US again, even though I am from one of the 28 excluded countries, since customs and immigration seems to be ignoring their instructions at will and just fingerprint the hell out of everybody anyway. I visited relatives in what was at the time held as part of the Soviet Union with less invasion of my privacy back in the 80s. It's really sad to see such a beautiful country fall victim to such totalitarianism.
The reason I am "bitching" about it is that this is a highly unusual procedure conducted on foreign nationals merely for the fact that they are just that, and I hope more countries follow Brazil's excellent example. Perhaps we could also get American travellers to wear something... a little yellow star, say, with the word American printed on it, you know, just in case, just so we know who they are.
I for one welcome our new SCOviet Russian overlords to whom all our base are belong.
remember this slashdot article that reffered to that
:
crypto-gram issue ???
quote
Fun with Fingerprint Readers
Tsutomu Matsumoto, a Japanese cryptographer, recently decided to look at biometric fingerprint devices. These are security systems that attempt to identify people based on their fingerprint. For years the companies selling these devices have claimed that they are very secure, and that it is almost impossible to fool them into accepting a fake finger as genuine. Matsumoto, along with his students at the Yokohama National University, showed that they can be reliably fooled with a little ingenuity and $10 worth of household supplies.
Matsumoto uses gelatin, the stuff that Gummi Bears are made out of. First he takes a live finger and makes a plastic mold. (He uses a free-molding plastic used to make plastic molds, and is sold at hobby shops.) Then he pours liquid gelatin into the mold and lets it harden. (The gelatin comes in solid sheets, and is used to make jellied meats, soups, and candies, and is sold in grocery stores.) This gelatin fake finger fools fingerprint detectors about 80% of the time.
His more interesting experiment involves latent fingerprints. He takes a fingerprint left on a piece of glass, enhances it with a cyanoacrylate adhesive, and then photographs it with a digital camera. Using PhotoShop, he improves the contrast and prints the fingerprint onto a transparency sheet. Then, he takes a photo-sensitive printed-circuit board (PCB) and uses the fingerprint transparency to etch the fingerprint into the copper, making it three-dimensional. (You can find photo-sensitive PCBs, along with instructions for use, in most electronics hobby shops.) Finally, he makes a gelatin finger using the print on the PCB. This also fools fingerprint detectors about 80% of the time.
Gummy fingers can even fool sensors being watched by guards. Simply form the clear gelatin finger over your own. This lets you hide it as you press your own finger onto the sensor. After it lets you in, eat the evidence.
Matsumoto tried these attacks against eleven commercially available fingerprint biometric systems, and was able to reliably fool all of them. The results are enough to scrap the systems completely, and to send the various fingerprint biometric companies packing. Impressive is an understatement.
There's both a specific and a general moral to take away from this result. Matsumoto is not a professional fake-finger scientist; he's a mathematician. He didn't use expensive equipment or a specialized laboratory. He used $10 of ingredients you could buy, and whipped up his gummy fingers in the equivalent of a home kitchen. And he defeated eleven different commercial fingerprint readers, with both optical and capacitive sensors, and some with "live finger detection" features. (Moistening the gummy finger helps defeat sensors that measure moisture or electrical resistance; it takes some practice to get it right.) If he could do this, then any semi-professional can almost certainly do much much more.
More generally, be very careful before believing claims from security companies. All the fingerprint companies have claimed for years that this kind of thing is impossible. When they read Matsumoto's results, they're going to claim that they don't really work, or that they don't apply to them, or that they've fixed the problem. Think twice before believing them.
Matsumoto's paper is not on the Web. You can get a copy by asking:
Tsutomu Matsumoto
Here's the reference:
T. Matsumoto, H. Matsumoto, K. Yamada, S. Hoshino, "Impact of Artificial Gummy Fingers on Fingerprint Systems," Proceedings of SPIE Vol. #4677, Optical Security and Counterfeit Deterrence Techniques IV, 2002.
Some slides from the presentation are here:
presentati