Security for Dummies
Safe and simple
Friday 27 June 2008, 11:37 PM
Faking a fingerprint (part 1)
Back in nineties I was working with TeKey Research group, supplying them raw materials for their tests. The task was to study if fingerprint sensors accept dead fingers. Yes, I was pathologist these years and got plenty of them :). After few experiments we realized that optical sensors cannot distinguish dead fingers from alive. Even worse, they accepted fingerprint images.
See how we did it. You will like the idea and simplicity
PreviousComments on this post
Excellent blog! If you want to add to your techniques, it was reported I think last year that a fingerprint captured by 'gummi bears' (gelatin candy) also could be used to fool fingerprint sensors.
Having seen James Bond do it in a movie at least once, I thought at the time that it was likely do-able, but now I see the movie makers got it right!
There is a USB flash drive product made by Kanguru (see ad below!). I wonder how well theirs work? I was actually considering using it but it turns out their product doesn't allow the flash to boot up the system its plugged into.
Kangaru fingerprint flash drives, despite several advantages, have few drawbacks:
1. They are based on capacitive matrix sensor. In one of my future posts I will show you the simple way to fake them.
2. The design is nice looking, but as in most flash drives there is separate cap protecting the sensor and USB plug. Users lose these caps and fingerprint sensor, being exposed to dust, dirt and humidity geting out of order prety fast.
My personal recommendation is using devices with swipe type fingerprint sensors. At least latent fingerprints are automatically removed. See this one
Xwindowsjunkie--have you seen this Dialogue Box video where Rupert and Charles make a fake finger out of plastic, jelly, milk and tea and try it out on a biometric security device? It's a good laugh: http://resources.zdnet.co.uk/articles/video/0,1000002009,39406497,00.htm.
Too funny! Have they ever thought of doing a cooking show?
Needless to say I haven't bothered pushing for fingerprint scanners at work.
