The Chaos Computer Club (CCC) claims that it can reproduce fingerprints to overcome security measures from simple photos of a user's fingers, reports VentureBeat. CCC member Jan "Starbug" Krissler presented his method for recreating a fingerprint at the group's annual convention in Hamburg, Germany over the weekend, as he generated the thumbprint of German Defense Minister Ursula von der Leyen by using a public photo and computer program VeriFinger.
/article-new/2014/12/cccfingerprint.png?lossy)
Instead, he explained how fingerprints can be snatched from persons at public events by simply using a “standard photo camera.”
The main source was a close-up picture of von der Leyen’s thumb, obtained during a news conference in October, along with photographs taken from different angles to get an image of the complete fingerprint.
The CCC demonstrated last year how it could bypass Apple's Touch ID fingerprint sensor with a photo of the original user's fingerprint. The newest method presented by the group does not require a hacker to obtain a physical object to recreate the fingerprint, although Krissler notes that other security methods like facial recognition can also easily be fooled through similar means. The group and Krissler hope to highlight the potential exploits in newer technology, and also noted that additional security layers like passwords should also be activated to secure information properly.
Top Rated Comments
(View all)What a pathetic and criminal waste of effort.
Why??
He is just showing the conceptional weaknesses of biometrical authentication. You are leaking this data everywhere without any control over it and unlike passwords you can't change your fingerprints or iris that easily.
Please have a look at: http://blog.dustinkirkland.com/2013/10/fingerprints-are-user-names-not.html
In my opinion it is very ethical to point out these issues to a broader audience.
Now if someone were to steal it they would have to go through all the steps listed above before I notice my phone was stolen and before I use 'Find My iPhone' to disable it.
The security of your phone is dependent on more than just the TouchID.
The TouchID remains the best security on a mobile device that is currently on the market. It's not perfect. It's not hack proof, but it is the best.
What a pathetic and criminal waste of effort.
Well, they're basically pointing towards security issues and also consult in this area, they are not criminal or hackers.
Honesty - The best security known to humankind