Monday, October 8, 2012

Challenge!

Theft of fingerprints easier than cutting off a finger, security experts warn (News.com.au)
Associate Professor of math and geospatial sciences at RMIT University, Dr Asha Rao told News Ltd that a cyber criminal wouldn't need your finger or retina in order to steal the stored data.

''When you watch political or forensic dramas, they show you the fingerprint but that's not really what is stored as it would take too much time to cross reference,'' Dr Rao said.

''To complete the biometric scans you don't need my finger, you need the hash of the biodata.''

A hash is like an algorithm or template that can be used to decode your data. ''If you steal the template, then you've basically lost your fingerprint,'' she said.

''It's actually easier to break than cutting off people's fingers.''

Oh, yeah?
Challenge!

Step one. Have the experts in question turn this into a fingerprint. Yes, it is a real fingerprint template; no hacking required.

2aba08229b3b2a44e72c8f14da168a560a3caf2257add068a7fc1636215bff53152546da3fc8071ea84433a42261f4ff7bc3b455199be8980eea2bb1e922f18aa309e050130d72ca124ecd6e9e86459e60858ff44f71d0c1c4e23b97a9a6554619543e8d347f79ea8fa70db87eaea7f37bf2cac4e697d5525479cc72fb653b5d32089e7b3cbcd01f8dba60eda95a50a31b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c1b2dc9ebaf0d5f602a64ff47f06cf97c 

Step two. Have the experts in question cut off someone's finger.

Step three. Have them explain which task they'd rather repeat.


"You want a toe?"


[I'll bet both tasks are much more difficult either from a technical or humane point of view than stealing and using a password. I assume that's why they are hackers instead of, well, you know - "hackers." And while, at least according to Walter Sobchak, "I can get you a toe," fingers are a little harder to come by. After all, people are going to need them to get at their cash.]




Bonus: Explain why any of this should cause any of the reported 79 per cent of Australians who would be comfortable using fingerprint biometrics to verify identity to change their mind (background here & here).