2 ms·

This has been taken to be fact for about a decade. Has anyone ever replicated this? CCC presenters have a tendency to, exaggerate, a little. The only presenta

This has been taken to be fact for about a decade. Has anyone ever replicated this? CCC presenters have a tendency to, exaggerate, a little. The only presentation given on this topic, at CCC, demonstrated an attack against fingerprint readers where a fingerprint was reconstructed from imagery, cast into a physical fake finger, and then authenticated against itself. Not that a fingerprint was reconstructed from imagery and authenticated against a scan of the actual finger. I can totally botch a reconstruction of a fingerprint based on some blurry imagery such that it looks like the number six side of a die, load the reconstruction into a fingerprint reader, and then authenticate against a gelatin finger with an imprint of six pips on it but I cannot say that I have reconstructed THE fingerprint.

Brian_K_White 3y ago
Even if it worked perfectly, this kind of thing is probably very time sensitive and short lived. Did it still work on the very next years model of phone? I think there are weaknesses all over the place still today, and wide variation between manufacturers and price points, but I assume the details change and get harder all the time, or at least change, making an example from 10 years ago of limited interest today, UNLESS the same thing also still worked today. Another aspect of that would be how the tools on both sides progress not just one side. A casual photograph from a common camera or phone from a reasonable distance today having a lot more information in it for instance. Or maybe other tools like fabricating a physical model from data by 3d printing etc, where the tools are both better and more readily available so the bar is lower even if the fundamental process is the same. That difference alone may make things go from possible to practical.

2 ms·

This has been taken to be fact for about a decade. Has anyone ever replicated this? CCC presenters have a tendency to, exaggerate, a little. The only presenta

by snakeyjake 3y ago

Brian_K_White 3y ago
Even if it worked perfectly, this kind of thing is probably very time sensitive and short lived. Did it still work on the very next years model of phone? I think there are weaknesses all over the place still today, and wide variation between manufacturers and price points, but I assume the details change and get harder all the time, or at least change, making an example from 10 years ago of limited interest today, UNLESS the same thing also still worked today. Another aspect of that would be how the tools on both sides progress not just one side. A casual photograph from a common camera or phone from a reasonable distance today having a lot more information in it for instance. Or maybe other tools like fabricating a physical model from data by 3d printing etc, where the tools are both better and more readily available so the bar is lower even if the fundamental process is the same. That difference alone may make things go from possible to practical.