Penetration Testing mailing list archives
RE: Hacking USB Thumbdrives, Thumprint authentication
From: "Deras, Angel R./Information Systems" <derasa () MSKCC ORG>
Date: Mon, 26 Jan 2004 14:43:12 -0500
When we investigated fingerprinting products, two colleagues cracked the system by using a paper photocopy of a finger. They placed it on the fingerprinting pad and pressed it with another finger to provide the heat that the pad needs to detect. I was incredulous of their account, but after reading the Putte source below, this sounds credible. -----Original Message----- From: Job de Haas [mailto:job () itsx com] Sent: Monday, January 26, 2004 6:37 AM To: pen-test () securityfocus com Subject: Re: Hacking USB Thumbdrives, Thumprint authentication Hi,
I'm interested in research regarding hacking USB drives unlocked with a thumbprint http://www.thumbdrive.com/prd_info.htm Or any thumbprint biometric hacking.
On fingerprint hacking the first and best expert I know is Ton van der Putte: http://www.keuning.com/biometry/ Someone that did a similar thing: T. Matsumoto: http://www.itu.int/itudoc/itu-t/workshop/security/present/s5p4.pdf I've seen the gummies (some only sub-millimeter thick) and they work with kitchen equipment despite 'skin detection' 'heart beat detection' etc. Regards, Job ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- ===================================================================== Please note that this e-mail and any files transmitted with it may be privileged, confidential, and protected from disclosure under applicable law. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this communication or any of its attachments is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and deleting this message, any attachments, and all copies and backups from your computer. --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Hacking USB Thumbdrives, Thumprint authentication m e (Jan 25)
- Re: Hacking USB Thumbdrives, Thumprint authentication Craig Pringle (Jan 26)
- Re: Hacking USB Thumbdrives, Thumprint authentication Job de Haas (Jan 26)
- RE: Hacking USB Thumbdrives, Thumprint authentication John Deatherage (Jan 26)
- Re: Hacking USB Thumbdrives, Thumprint authentication Walter Williams (Jan 27)
- RE: Hacking USB Thumbdrives, Thumprint authentication Rob Shein (Jan 27)
- <Possible follow-ups>
- RE: Hacking USB Thumbdrives, Thumprint authentication Deras, Angel R./Information Systems (Jan 26)
- Re: Hacking USB Thumbdrives, Thumprint authentication Volker Tanger (Jan 27)
- Re: Hacking USB Thumbdrives, Thumprint authentication m e (Jan 27)
- RE: Hacking USB Thumbdrives, Thumprint authentication Rob Shein (Jan 27)
- RE: Hacking USB Thumbdrives, Thumprint authentication Jerry Shenk (Jan 27)
- RE: Hacking USB Thumbdrives, Thumprint authentication Atul Porwal (Jan 27)
- RE: Hacking USB Thumbdrives, Thumprint authentication Herbold, John W. (Jan 27)
- Re: Hacking USB Thumbdrives, Thumprint authentication m e (Jan 28)
- Re: Hacking USB Thumbdrives, Thumprint authentication Meritt James (Jan 29)
- Re: Hacking USB Thumbdrives, Thumprint authentication m e (Jan 28)