Cyber criminals defeat vein authentication by causing a fake hand. Protection researchers used 2, 500 pictures of a palm to generate an exact model out of wax

Hackers defeat vein authentication by making a fake hand. Security researchers used 2, 500 pictures of a palm to produce an exact model out of wax


Biometric security has moved beyond just fingerprints and deal with recognition to vein-based authentication. Unfortunately, hackers have already figured out a way in order to crack that, too. According to Motherboard, security experts at the Chaos Communication Congress hacking conference in Leipzig, Germany showed a new model wax hand of which they used to defeat a vein authentication program using a wax model hands.

Vein authentication typically runs on the computer system to check the shape, size and location of a person's veins in their palm. Those patterns have to be able to be determined each time the machine scans the individuals hand. To be able to fool that security check, the experts took 2, 500 pictures of a hand using a modified SLR camera that had the infrared filtration system removed to better spotlight veins under the epidermis. They then took all those photos and created a wax hand with the details of the person's veins attractive right in. That wax mock-up was enough to bypass the vein authentication system.

To be very clear, the method employed by the security researchers isn't one that an average joe could easily replicate. As the researchers said images coming from as far away as five meters (about of sixteen feet) are good adequate, snapping enough to make a reliable model might be a challenge without lots regarding use of the hand within question. It's a more extensive cracking process than, point out, fingerprint ID that can potentially be hacked basically by lifting a person's fingerprint from an object they have touched. It still presents an issue that will security systems can be manipulated with cheap and easily accessible materials.