Hackers defeat vein authentication by causing a fake hand. Safety researchers used 2, 500 pictures of a hands to generate an exact model out of wax

Cyber criminals defeat vein authentication by making a fake hand. Protection researchers used 2, 500 pictures of a hand to produce an exact model out of wax


Biometric security has moved past just fingerprints and face recognition to vein-based authentication. Unfortunately, hackers have already determined a way to crack that, too. According to Motherboard, security scientists at the Chaos Conversation Congress hacking conference within Leipzig, Germany showed a new model wax hand that will they used to beat a vein authentication system by using a wax model palm.

Vein authentication typically utilizes a computer system to scan the shape, size and location of a individuals veins in their hand. Those patterns have to be able to be recognized each time the device scans the person's hand. So as to fool of which security check, the experts took 2, 500 pictures of a hand using a modified SLR camera that had the infrared filtration system removed to better highlight veins under the pores and skin. They then took individuals images and created a feel hand with the information on the person's veins sculpted right in. That wax mock-up was enough to bypass the vein authentication system.

To be obvious, the method employed by the safety researchers isn't one which an average joe could easily replicate. Even though the researchers said pictures from as far away since five meters (about sixteen feet) are good sufficient, snapping enough to create a reliable model would be a challenge without lots of use of the hand within question. That is a more rigorous cracking process than, point out, fingerprint ID that could potentially be hacked simply by lifting a person's fingerprint from an item they have touched. That still presents a problem of which security systems can be manipulated with cheap and easily accessible materials.