Cyber criminals defeat vein authentication by making a fake hand. Security researchers used 2, five-hundred pictures of a hand to produce an exact model out of wax

Cyber-terrorist defeat vein authentication by making a fake hand. Safety researchers used 2, 500 pictures of a hand to produce an exact model out of wax


Biometric security has moved past just fingerprints and face recognition to vein-based authentication. Unfortunately, hackers have already figured out a way to crack that, too. In accordance to Motherboard, security experts at the Chaos Connection Congress hacking conference in Leipzig, Germany showed a model wax hand of which they used to defeat a vein authentication method using a wax model hands.

Vein authentication typically uses a computer system to check the shape, size in addition to location of a person's veins in their hand. Those patterns have in order to be recognized each period the system scans the individual's hand. In order to fool that security check, the researchers took 2, 500 pictures of a hand using a modified SLR camera that had the infrared filter removed to better highlight veins under the pores and skin. They then took all those photographs and created a feel hand with the information on the person's veins sculpted right in. That polish mock-up was enough in order to bypass the vein authentication system.

To be clear, the method employed by the security researchers isn't the one that an average joe could easily replicate. Even though the researchers said pictures through as far away because five meters (about sixteen feet) are good sufficient, snapping enough to create a reliable model might be a challenge without lots of access to the hand within question. It's a more rigorous cracking process than, say, fingerprint ID that could potentially be hacked basically by lifting a individuals fingerprint from an object they have touched. This still presents a problem of which security systems can be manipulated with cheap and readily available materials.