Cyber-terrorist defeat vein authentication by making a fake hand. Safety researchers used 2, 500 pictures of a palm to produce an exact model out of wax

Hackers defeat vein authentication by making a fake hand. Safety researchers used 2, 500 pictures of a hand to generate an exact model out of wax


Biometric security has moved beyond just fingerprints and face recognition to vein-based authentication. Unfortunately, hackers have already determined a way to crack that, too. According to Motherboard, security researchers at the Chaos Conversation Congress hacking conference inside Leipzig, Germany showed a model wax hand that they used to defeat a vein authentication system by using a wax model hand.

Vein authentication typically runs on the computer system to check out the shape, size in addition to location of a individual's veins in their hand. Those patterns have in order to be discovered each period the system scans the individuals hand. So as to fool that will security check, the scientists took 2, 500 images of a hand by using a modified SLR camera that will had the infrared filtration system removed to better emphasize veins under the epidermis. They then took all those pictures and developed polish hand with the information on the person's veins sculpted right in. That feel mock-up was enough to be able to bypass the vein authentication system.

To be clear, the method utilized by the security researchers isn't one which the average person could easily replicate. As the researchers said pictures coming from as far away as five meters (about 16 feet) are good enough, snapping enough to make a reliable model will be a challenge without lots regarding entry to the hand in question. From the more extensive cracking process than, say, fingerprint ID that may potentially be hacked basically by lifting a person's fingerprint from an thing they have touched. That still presents an issue that will security systems can end up being manipulated with cheap and easily accessible materials.