Cyber-terrorist defeat vein authentication by making a fake hand. Protection researchers used 2, 500 pictures of a hands to produce an exact model out of wax

Hackers defeat vein authentication by making a fake hand. Protection researchers used 2, five hundred pictures of a hands to produce an exact model out of wax


Biometric security has moved beyond just fingerprints and encounter recognition to vein-based authentication. Unfortunately, hackers have previously identified a way to crack that, too. Based to Motherboard, security experts at the Chaos Communication Congress hacking conference inside Leipzig, Germany showed a new model wax hand that they used to beat a vein authentication system by using a wax model palm.

Vein authentication typically runs on the computer system to check the shape, size and location of a individuals veins in their palm. Those patterns have to be recognized each moment the system scans the individual's hand. In order to fool that security check, the experts took 2, 500 images of a hand using a modified SLR camera of which had the infrared filter removed to better emphasize veins under the skin. They then took all those pictures and developed wax hand with the information on the person's veins sculpted right in. That wax mock-up was enough in order to bypass the vein authentication system.

To be very clear, the method used by the security researchers isn't one which an average could easily replicate. Even though the researchers said images coming from as far away as five meters (about 16 feet) are good enough, snapping enough to create a reliable model will be a challenge without lots associated with entry to the hand within question. It's a more rigorous cracking process than, state, fingerprint ID that could potentially be hacked just by lifting a person's fingerprint from an item they have touched. That still presents a concern that will security systems can end up being manipulated with cheap in addition to readily available materials.