Vulnerability Development mailing list archives

RE: Hacking USB Thumbdrives, Thumprint authentication


From: "David Schwartz" <davids () webmaster com>
Date: Mon, 26 Jan 2004 12:33:36 -0800


I don't know how much consistant unique detail theire is in a thumb
print, but if the encryption key was built up based on the print then
none of these would matter.

        If the thumbppring is the key, then you're sunk. After all, the person's
thumbprint is going to be on the pad unelss they carefully wipe it off after
every time they use it. Even if they do wipe it off or the surface of the
device is carefully designed to make lifting a print difficult, all you have
to do is dust their phone, desk, or glass.

        DS



Current thread: