4 ms·

Mythbusters was able to defeat several fingerprint identification systems quite easily. At first their attempts were pretty elaborate. They lifted a fingerpri

by Simucal 14y ago

Mythbusters was able to defeat several fingerprint identification systems quite easily. At first their attempts were pretty elaborate. They lifted a fingerprint from a glass a person had held and then used an acidic solution to etch that pattern onto a mold. This mold then opened all of the high-end thumbprint readers they had. However, if I remember correctly, they then went low-tech and simply used a photocopy of the thumbprint which also opened several devices.

sophacles 14y ago
I think it is good to remember that security is situational. So unless a prisoner is holding a copy of every officer/guard/transfer agent's finger prints, they won't be able to undo the lock while in most detention situations (the only ones I can come up with are fairly contrived, or require the prisoner to escape in cuffs, making the point moot). Basically, if the arresting officer puts the cuffs on the detainee, and scans in his fingerprint as the "unlock with this fingerprint" option, it becomes very difficult for the detainee to get a copy of that print in a form that will work, and then use it, unlike an accessible hidden key known to work with $model-of-handcuff. Of course that says nothing about other ways to defeat the cuffs, which would probably become the prime area of research at that point. (why attack the locking mechanism if there are easier to defeat weaknesses).
- derrida 14y ago
  The CCC are onto it https://www.youtube.com/watch?v=mVu5ofv92e0 https://www.youtube.com/watch?v=mVu5ofv92e0
- sbov 14y ago
  According to the article, that's not how handcuffs need to work. Handcuffs are designed so that one officer can put them on and another can take them off. If that weren't the case this situation of being able to print 1 key for all handcuffs wouldn't exist - they would simply make unique keys per handcuff.
  - sophacles 14y ago
    Fair enough, although, I think a procedure change and a "transfer authority" function could easily cover this. The transfer function would basically be: original cuffer presses the transfer button, swipes his print, the receiver then swipes his print, and the transfer is done. However, in a broader view, yeah, there are probably better ways than fingerprints handle keys once electronic locking mechanisms are introduced. Probably something akin to a 2-factor cryptographic mechanism.
    - pavel_lishin 14y ago
      Easy nitpick, what if one of the officers gets sick, gets injured, or just plain forgets and goes home?
      - sophacles 14y ago
        Good question. I don't know, but perhaps an override key. However now that the physical key isn't an open secret, and needed by everyone, they would be easier to secure. And small batches would have a specific key for that batch, but not for all cuffs, making it even harder for the detainee to have the right duplicate on hand. I feel though that my larger point is getting lost in this thread. It was/is: Just because a security technology doesn't work for reason $x in situation $y, that doesn't mean that the weaknesses also apply to situation $z.
    - cswetenham 14y ago
      Just for interest, this still can be done with unique keys: Officer Alice handcuffs prisoner and wants to hand off to Officer Bob. Officer Bob locks prisoner with his own handcuffs (prisoner is now wearing two pairs), then Officer Alice removes hers.

by Simucal 14y ago

sophacles 14y ago

I think it is good to remember that security is situational. So unless a prisoner is holding a copy of every officer/guard/transfer agent's finger prints, they won't be able to undo the lock while in most detention situations (the only ones I can come up with are fairly contrived, or require the prisoner to escape in cuffs, making the point moot). Basically, if the arresting officer puts the cuffs on the detainee, and scans in his fingerprint as the "unlock with this fingerprint" option, it becomes very difficult for the detainee to get a copy of that print in a form that will work, and then use it, unlike an accessible hidden key known to work with $model-of-handcuff. Of course that says nothing about other ways to defeat the cuffs, which would probably become the prime area of research at that point. (why attack the locking mechanism if there are easier to defeat weaknesses).

derrida 14y ago
The CCC are onto it https://www.youtube.com/watch?v=mVu5ofv92e0 https://www.youtube.com/watch?v=mVu5ofv92e0
sbov 14y ago
According to the article, that's not how handcuffs need to work. Handcuffs are designed so that one officer can put them on and another can take them off. If that weren't the case this situation of being able to print 1 key for all handcuffs wouldn't exist - they would simply make unique keys per handcuff.
- sophacles 14y ago
  Fair enough, although, I think a procedure change and a "transfer authority" function could easily cover this. The transfer function would basically be: original cuffer presses the transfer button, swipes his print, the receiver then swipes his print, and the transfer is done. However, in a broader view, yeah, there are probably better ways than fingerprints handle keys once electronic locking mechanisms are introduced. Probably something akin to a 2-factor cryptographic mechanism.
  - pavel_lishin 14y ago
    Easy nitpick, what if one of the officers gets sick, gets injured, or just plain forgets and goes home?
    - sophacles 14y ago
      Good question. I don't know, but perhaps an override key. However now that the physical key isn't an open secret, and needed by everyone, they would be easier to secure. And small batches would have a specific key for that batch, but not for all cuffs, making it even harder for the detainee to have the right duplicate on hand. I feel though that my larger point is getting lost in this thread. It was/is: Just because a security technology doesn't work for reason $x in situation $y, that doesn't mean that the weaknesses also apply to situation $z.
  - cswetenham 14y ago
    Just for interest, this still can be done with unique keys: Officer Alice handcuffs prisoner and wants to hand off to Officer Bob. Officer Bob locks prisoner with his own handcuffs (prisoner is now wearing two pairs), then Officer Alice removes hers.