Cyber-terrorist defeat vein authentication by making a fake hand. Security researchers used 2, 500 pictures of a palm to generate an exact model out of wax

Cyber-terrorist defeat vein authentication by looking into making a fake hand. Security researchers used 2, five-hundred pictures of a hand to produce an exact model out of wax


Biometric security has moved past just fingerprints and face recognition to vein-based authentication. Unfortunately, hackers have already identified a way to crack that, too. Based to Motherboard, security scientists at the Chaos Conversation Congress hacking conference in Leipzig, Germany showed the model wax hand of which they used to eliminate a vein authentication program using a wax model hands.

Vein authentication typically runs on the computer system to check the shape, size and location of a individual's veins in their palm. Those patterns have to be able to be recognized each moment the machine scans the individual's hand. To be able to fool of which security check, the experts took 2, 500 photos of a hand using a modified SLR camera that had the infrared filter removed to better spotlight veins under the epidermis. They then took individuals photos and developed wax hand with the information on the person's veins sculpted right in. That polish mock-up was enough to be able to bypass the vein authentication system.

To be clear, the method used by the safety researchers isn't the one which the average person could easily replicate. Even though the researchers said images coming from as far away since five meters (about sixteen feet) are good enough, snapping enough to help to make a reliable model might be a challenge without lots of use of the hand inside question. It's a more rigorous cracking process than, say, fingerprint ID that can potentially be hacked basically by lifting a individuals fingerprint from an item they have touched. That still presents a problem of which security systems can be manipulated with cheap plus easily accessible materials.