Slashdot Mirror
Japan Researchers Warn of Fingerprint Theft From 'Peace' Sign (phys.org)
Tulsa_Time quotes a report from Phys.Org: Could flashing the "peace" sign in photos lead to fingerprint data being stolen? Research by a team at Japan's National Institute of Informatics (NII) says so, raising alarm bells over the popular two-fingered pose. Fingerprint recognition technology is becoming widely available to verify identities, such as when logging on to smartphones, tablets and laptop computers. But the proliferation of mobile devices with high-quality cameras and social media sites where photographs can be easily posted is raising the risk of personal information being leaked, reports said. The NII researchers were able to copy fingerprints based on photos taken by a digital camera three meters (nine feet) away from the subject.
Fix your fucking website already
Years of burning their fingers on the glass bong have rendered this technique ineffective.
Fingerprints and other biometric information should only be used for identification and not for authentication.
Fingerprints are not used for authentication, right? So it's not a problem, is it?
Even the kids in my school get this - you do have to explain the first time but then it's obvious to them.
Where do you write down your password? Almost nowhere (some of our kids have password in their planners and things like that, but they have no access anyway).
Where do you leave your fingerprint? Everywhere you go, on everything you touch, including the device you're logging into, and every device you've ever logged into.
Though we don't get high-level attacks, I feel that users need to only have this explained once to question the James Bond etc. concept of using fingerprints for doors, high security facilities, etc.
The fact that cameras are at the point that you can photograph someone's fingerprint? That's been true for a little while. That means that Trump / May / whatever leader's fingerprints have basically been public-domain for the world's spies for many years. Hence you should be SERIOUSLY questioning use of fingerprints as anything more than convenience or casual use.
Coming next: Seconds after the moment you shake hands with me, all your personal datas are belong to us.
Instead of making a peace sign when having your photo taken, an obvious solution is to flip the bird instead! Your fingerprints are facing away from the camera. All of the problems are solved, once and for all!
I would much rather have a photo of my fingers stolen than have my fingers, or finger tips stolen!
~ People that think they are better than anyone else for any reason are the cause of all the strife in the world.
German defense minister got her fingerprints "stolen" in a similar fashion two years ago.
They're saying they have the fingerprints of every Japanese female under the age of 30.
#DeleteChrome
Fingerprints are not used for authentication, right?
Not sure about the States, but in Japan many of the banks have biometric devices on the ATMs to read fingerprints. From the placement of the devices, I would say the thumb is unlikely to be used, and I would suppose that most people use their index finger.
Also there are a lot of smartphones with fingerprint recognition, and I have two computers with it (though I'm not using it because I don't regard it as secure).
Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
It's the V for victory
The proposed solution is to hold your hand the other way around exposing only your fingernails. ;-)
on your forehead right? For anyone to see?
Then why do people think information you leave all over the place is a replacement for a password?
When I pass through border control they cannot even get my fingerprints when I'm touching the glass. And now a blurry mobile phone would be able to do better from several meters away?
I guess the next warning will be to always wear gloves, otherwise you will be leaving a trail of fingerprints everywhere you go...
I guess the horns "\m/" sign is also affected, even though you're displaying only your index and pinky fingers. The vulcan greeting sign "_\\//" would be the worst to photograph, since it displays all the fingerprints.
As Japanese photos gradually become less peaceful...
British photos gradually become more well behaved.
Assuming people stop holding up those 2 fingers.
Cwm, fjord-bank glyphs vext quiz
The same is true for retina print (eye print) checks. It does take a better camera (20M pixel), and it may require a brief *infrared* flash (so you will *not* notice it), but it will allow one to copy the retina prints from everyone looking in the camera's direction, and they are most often good enough to confuse retina scanners into accepting a false eye as valid.
Biometry may be useful as a 2FA/3FA, but it really isn't "safe" by itself.
Uh, that would be iris scans, right? If someone is reading your retina, it's not from more than a couple of centimeters in front of your eye.
The sign they are talking about is the V of Vrijheid and Victoire, after the Dutch word for Freedom and the French word for Victory. People in occupied Belgium used it during WWII. The gesture was used as a response to the Nazi salute, and was used every time the Germans lost a battle (the news was spread by the BBC). This way the people managed to scare the German soldier, and indirectly instructed them to be nice and to not commit war crimes. This sign was adopted in both the Netherlands and France and was even picked up by Churchill who made the symbol for the allies (after having done it wrong the first few times, he showed the back of his hands which was a way to insult other people in the British lower classes).
Biometrics: securing your data via non-changeable, non-secret data.
Biometrics should *never* be used in a situation where the input is not controlled. For example, it is okay to use it as part of a border crossing, it is *not* okay to use it on a door lock. It is okay to use it on a phone, as the goal there is "prevent someone from quickly unlocking your phone if you step away for a moment and you trust them not to steal it" - in any other situation, a person with physical access to your phone can already compromise it, so alternatives don't significantly increase security.
But someone with physical access to your phone can't already compromise it, if it's a later model iPhone, at least not according to the FBI. The FBI asked the court to compel Apple to create an exploitable OS so that they could break into a phone, presumably because they could not access it even though they had physical possession. With the later models that have the secure enclave, even that wouldn't have sufficed to break into the phone. Given enough time and effort (and Apple's signing key), it might still be possible but it's not like in the old days of computers where physical access == pwned.
https://en.wikipedia.org/wiki/...
Enigma
They should just reverse the hand gesture and show the camera their fingernails.
Glove Manufacturers report an encouraging spike in sales
Anyone can have their hands photographed and fingerprints stolen. Who the fuck came up with the fearmongering scare tactic that singles out making the peace sign as a way of stealing fingerprint data? That's so fucking lame.
It is pitch black. You are likely to be eaten by a grue.