Cyber criminals defeat vein authentication by causing a fake hand. Safety researchers used 2, five hundred pictures of a hand to produce an exact model out of wax

Hackers defeat vein authentication by making a fake hand. Security researchers used 2, five-hundred pictures of a hand to produce an exact model out of wax


Biometric security has moved beyond just fingerprints and encounter recognition to vein-based authentication. Unfortunately, hackers have previously figured out a way in order to crack that, too. According to Motherboard, security scientists at the Chaos Connection Congress hacking conference inside Leipzig, Germany showed the model wax hand that they used to beat a vein authentication method using a wax model palm.

Vein authentication typically uses a computer system to scan the shape, size and location of a individual's veins in their hand. Those patterns have to be determined each period the device scans the person's hand. In order to fool of which security check, the experts took 2, 500 photos of a hand using a modified SLR camera of which had the infrared filtration removed to better emphasize veins under the skin. They then took those photographs and created a polish hand with the information on the person's veins attractive right in. That feel mock-up was enough to be able to bypass the vein authentication system.

To be clear, the method utilized by the security researchers isn't the one which the average person could easily replicate. While the researchers said photos coming from as far away since five meters (about 16 feet) are good sufficient, snapping enough to make a reliable model might be a challenge without lots of use of the hand in question. That is a more rigorous cracking process than, say, fingerprint ID that may potentially be hacked basically by lifting a person's fingerprint from an thing they have touched. That still presents a concern that security systems can end up being manipulated with cheap plus easily available materials.