3 ms·
A wee bit of motivation, hah, are you James Bond or something? Usernames can be guessed remotely, fingerprints can't really. Please demonstrate an attack that
by ses1984 7y ago
A wee bit of motivation, hah, are you James Bond or something?
Usernames can be guessed remotely, fingerprints can't really.
Please demonstrate an attack that takes "a wee bit" of effort where you can use a fingerprint you found in the wild to auth.
- josefx 7y agoThe CCC went after a German politician to show just how easily you could copy a fingerprint even without access to an object touched by the target[1]. A few pictures of the finger are more than enough. [1] https://www.macrumors.com/2014/12/29/ccc-reproduce-fingerprints-public-photos/ https://www.macrumors.com/2014/12/29/ccc-reproduce-fingerpri...
- Wowfunhappy 7y agoHow do you actually use the picture of the fingerprint to get into a phone? It doesn’t accept pictures, only fingers.
- et-al 7y agoFrom the NewScientist article Laforet linked above: > fake fingerprints can be created by imprinting copies in rubbery gels or silicone plastic, says Marcela Espinoza of the Institute of Police Science in Lausanne, Switzerland. Replace silicone with some other flesh-like material that's conductive.
- ses1984 7y agoOk but isn't that significantly more trouble than seeing or guessing a username? Does this take just a "wee bit of motivation"?
- petschge 7y agoPrint with a laserjet onto overhead projector foil, spread a suitable kind of wood glue, dry, peel and apply to own finger tip. It is actually very straight forward.
- josefx 7y agoThis video[1] is German, however as far as I can tell everything you need to get from an image to a fake print is easily available. The relevant part starts at 65 seconds. Only a few minutes to get a working fake. It is basically the process described by petschge. [1] https://youtu.be/OPtzRQNHzl0?t=65 https://youtu.be/OPtzRQNHzl0?t=65