funsec mailing list archives

Re: Mythbusters beat biometric finger print security


From: Gadi Evron <ge () linuxbox org>
Date: Sat, 7 Jul 2007 05:12:08 -0500

Apparently link has been removed, but exists in 20 other uploads.
Wierd:

http://www.youtube.com/watch?v=xq_1-bJMw9Q

On 2007-07-07 05:07-0500, Gadi Evron wrote:
Mythbusters is a cool British show that tries to scientifically attack
myths. They even use guns. :P

To be honest, the way they conduct experiments and reach conclusions is
somewhat flawed, to say the least, but they are cool, serious and
professional (aside for the occasional safety boo-boo). They invest time
and resources in building monstrosities to prove points. :)

This time, it was about breaking biometric systems with Gummy bears!
(see bottom of post for references)

I really like this video, which you can watch on YouTube:
http://www.youtube.com/watch?v=oXyFmieZjiE

I have seen this over at Xavier Ashe's The Lazy Genius
(http://blog.xavier.ashe.com/blog/_archives/2006/10/2/2381055.html) a
longg time ago, but just made a search to find it again and post it
here. In the past, I have studied biometrics extensively and how the
systems can be beat. But there is nothing like a short video to make
your point for you.

Original link is from:
http://blogs.technet.com/steriley/archive/2006/09/20/457845.aspx

The original public paper discussing this particular technique of $10
worth materials for breaking these systems using Gummy bears is from
Tsutomu Matsumoto, a Japanese cryptographer, from around 2002.
I don't think his paper was ever online, but his slides were. They seem
gone now at a casual search, but I found some other slides by him:
http://web.mit.edu/6.857/OldStuff/Fall03/ref/gummy-slides.pdf

        Gadi.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

--
--
"beepbeep it, i leave work, stop reading sec lists and im still hearing
gadi"
- HD Moore to Gadi Evron on IM, on Gadi's interview on npr, March 2007.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: