Slashdot Mirror
Researchers Hack Biometric Faces
yahoi sends in news from a week or so back: "Vietnamese researchers have cracked the facial recognition technology used for authentication in Lenovo, Asus, and Toshiba laptops in lieu of the standard logon/password. The researchers were able to easily bypass the biometric authentication system built into the laptops by using photos of an authorized user, as well as by presenting multiple phony facial images in brute-force attacks. One of the researchers will demonstrate the hack at Black Hat DC this week. He says the laptop makers should remove the facial biometrics feature from their products because the vulnerability of this technology can't be fixed."
Shouldn't they get charged with hacking the researchers faces off? That is kind of brutal no?
A use for this life-sized photo of Sarah Palin's face.
Heh, if you have physical access the game is over. "Lock your terminal" is merely a poor defense against bored pranksters (beating their head in if they touch your machine is the only effective deterrent).
How we know is more important than what we know.
Everything is somewhat vulnerable, and a determined intruder with infinite resource will almost always find a way in.
The point is facial recognition alone is so vulnerable! All you need is a cameraphone and a photo printer - and you can't revoke your face as your password either. At least with fingerprints you can get hacked nearly 10 times (on average) before it becomes a problem.
So many choices...
1. Hi there! Normally I have to chop off a user's
right index finger to successfully pass authentication. I'm sorry to tell you that it seems your finger won't be enough...
2. I hope your laptop's biometric device comes with a built-in microscope. If not, will you be able to sue for being told it was one-size-fits-all?
3. So rather than hold up a photo of your face to authenticate myself to your laptop, I should instead hold up a sewing needle?
4. My password is 'castrate'. If you know what I mean.
captcha: heckle (ha!)
Ummm... balaclava the headwear, not baklava the tasty Greek pastry! I guess you can still wear bakclava for your wife, if that will help, but maybe not in public.
Maybe its time I got in touch with that bully I knew in kindergarten. He seemed to have a natural gift in that area.
He had two faces?
And yes, C-level's love biometric stuff because they don't have to remember passwords.
They should just all get Ident-i-Eeze cards.
No, no, no. I'm pretty sure the parent was talking about wearing baklava! It's really, really sticky, see, so if someone tries to take a picture of you, they'll probably end up stuck to your face!
My blog
If you're in a coffee shop, then the best type of authentication is dance recognition. You place the laptop on a table, push the chair to one side and dance like you're selling nails. As most people are terrible dancers it should be a fairly unique identifier. Especially for Apple owners, who will have to dance like Leonard Cohen because they all wear polo neck sweaters.
Task Mangler
Assuming that's the ONLY place you're wearing it, that is.
If you've ever posted a photo of yourself on Twitter, Facebook, Myspace, a blog, or your website, people can easily get a high-quality photo of you without you knowing it.
You've seen a high quality photo on Facebook?