Asian Fever

Why fingerprints shouldn’t be used for security

SOURCE: http://www.androidauthority.com/fingerprints-and-security-272092/

Why fingerprints shouldn’t be used for security
by Gary Sims on September 23, 2013 8:59 am

Apple is clearly very pleased with the iPhone 5S and although its new biometric security system TouchID seems like a neat feature at first glance, the use of biometric data for security isn’t necessarily a good idea.

The problem with fingerprint scanners is that they aren’t as secure as you might think, it raises some interesting privacy issues but worst of all once your biometric information has been compromised you can’t change it.

In terms of security, the Chaos Computer Club (CCC) has already shown that Apple’s TouchID can be tricked using easy everyday means. Although we are only talking about a $600 smartphone and there are easier crimes to commit than trying to lift someone’s fingerprints just so you can access their phone, the weaknesses in fingerprint scanning are applicable to every situation where they are used including on identity documents (like passports) or scanners at supermarkets. In 2007 the CCC demonstrated how to trick a fingerprint scanner at a supermarket resulting in a shopping bill being charged to someone else’s account. In 2008 the group included thin film copies of the fingerprints of the then German Minister of the Interior Wolfgang Schäuble in its club magazine. The CCC’s webpage on how to fake fingerprints was uploaded in 2004, nearly a decade ago and the techniques described remain valid today.

There are also serious privacy questions around the use of biometric data. A senior US senator has written to Apple asking the Cupertino tech giant how the fingerprint data is encrypted on an iPhone 5S, whether any diagnostic data is ever sent back to Apple about the fingerprints and the exact legal status of the biometric data – does it belong to Apple? Could the data be subpoenaed?
The reason Senator Al Franken is asking these questions is because once your biometric data has been stolen you can’t change it. “Let me put it this way: if hackers get hold of your thumbprint, they could use it to identify and impersonate you for the rest of your life,” wrote the Senator, who is also the chairman of the Senate Judiciary Subcommittee on Privacy, Technology and the Law.

Today, if someone hacks one of your online accounts you just change your password. If someone steals your bank card, you just cancel it and get another one and so on. But if someone managed to steal and use your biometric data you can’t change your fingerprints. You can’t alter your retinas or modify your DNA. The fact that these characteristics are fixed is why they are used in crime detection, but using them for information security is dubious.

Worst still you leave a biometric trail wherever you go, everything you touch, every piece of skin or hair that falls leaves biometric information about you. Again that is why it is so useful for solving crimes, but you wouldn’t go around leaving fragments of your passwords everywhere would you?

It is plain stupid to use something that you can't change and that you leave everywhere every day as a security token. The public should no longer be fooled by the biometrics industry with false security claims.
Frank Rieger, spokesperson of the CCC

In context we are only talking about accessing someones phone, I understand that. And some may think that using TouchID as an easy way to stop people using your phone is great – and maybe it is. But what if in the future my banking information is verified via TouchID? What if I can pay at a shop or online store using data verified by TouchID? Then suddenly lifting a copy of my fingerprints from a glass of soda means a criminal can empty my bank account and go on a shopping spree. Maybe we should stick to other forms of authentication.


Enjoy your new iPhone!
:wave:
 

badbadboy

Well-known member
Nov 2, 2006
9,544
308
83
In Lust Mostly
This is why retina recognition is the preferred choice of most security organizations.

A blurred thumb print can easily be mistaken for someone else's.
 

Cami Parker

Beautiful Blonde Dream Girl
Mar 7, 2013
2,105
59
63
Vancouver, BC
www.camiparker.ca
The lady at corporate out me on the list!! God knows how long the list is... They never have enough and they do it on purpose!!!



Shit, when you start dreaming about it, its too late. Then You MUST own it!
 

Cami Parker

Beautiful Blonde Dream Girl
Mar 7, 2013
2,105
59
63
Vancouver, BC
www.camiparker.ca
The problem for me is, I have the 5, but on my way back from Key West in May, the TSA dropped and shattered the screen of my phone. They told me I could Mae a report, which would talk 2 hours. I had 3 connecting flights to get back to Vancouver so wasn't about to stay 2 hours and miss my flights. I never replaced it, or payed the $250 to get it fixed, because I was so irked thinking why the heck should I pay for it when I didn't break it?!? So I've had a broken screen for the past 5 months, and I mean really broken. You can see the inside of my phone in places, so I've been waiting for the 5S... If not, I would have stuck with the 5, no problems...
 
The problem for me is, I have the 5, but on my way back from Key West in May, the TSA dropped and shattered the screen of my phone. They told me I could Mae a report, which would talk 2 hours. I had 3 connecting flights to get back to Vancouver so wasn't about to stay 2 hours and miss my flights. I never replaced it, or payed the $250 to get it fixed, because I was so irked thinking why the heck should I pay for it when I didn't break it?!? So I've had a broken screen for the past 5 months, and I mean really broken. You can see the inside of my phone in places, so I've been waiting for the 5S... If not, I would have stuck with the 5, no problems...
You are so brave!! I hear you can get it fixed for like $50 out on Kingsway in Burnaby. That may be an urban legend though. I will find out for you when I can and get back to you.

Shit they broke your phone - THOSE BASTARDS!!!! :mad:


 

Feenix

New member
Dec 11, 2006
912
0
0
I am here.
DAILY PLANET on Discovery Channel did a piece last week, showing that finger prints to fool security devices can be compromised using a thin gelatin mold of the real owner's finger print.

Where there is a will, the bad guys will always find a way to cheat.
 

Banger77

Active member
Mar 22, 2008
310
83
28
Cruising in my RV
The problem for me is, I have the 5, but on my way back from Key West in May, the TSA dropped and shattered the screen of my phone. They told me I could Mae a report, which would talk 2 hours. I had 3 connecting flights to get back to Vancouver so wasn't about to stay 2 hours and miss my flights. I never replaced it, or payed the $250 to get it fixed, because I was so irked thinking why the heck should I pay for it when I didn't break it?!? So I've had a broken screen for the past 5 months, and I mean really broken. You can see the inside of my phone in places, so I've been waiting for the 5S... If not, I would have stuck with the 5, no problems...
The LCD touch screen is already $100 on Ebay; replacing the screen is easy whats really hard is taking apart the phone with minimal cosmetic damage.

You are so brave!! I hear you can get it fixed for like $50 out on Kingsway in Burnaby. That may be an urban legend though. I will find out for you when I can and get back to you.
Most likely in Crystal Mall and the $50 is for the service charge probably but, at least over $100 for the LCD touch screen part.
 
Last edited:

Cami Parker

Beautiful Blonde Dream Girl
Mar 7, 2013
2,105
59
63
Vancouver, BC
www.camiparker.ca
Seriously... Last I checked it only applied to the 4S and below.. Do drop me a note if you hear differently please! I'm starting to get concerned for my brain, given the exposed iPhone insides right next to my ear...

You are so brave!! I hear you can get it fixed for like $50 out on Kingsway in Burnaby. That may be an urban legend though. I will find out for you when I can and get back to you.

Shit they broke your phone - THOSE BASTARDS!!!! :mad:


 
Ashley Madison
Vancouver Escorts