RE: Hacking USB Thumbdrives, Thumprint authentication

From: Deras, Angel R./Information Systems (derasa@MSKCC.ORG)
Date: Mon Jan 26 2004 - 14:43:12 EST


When we investigated fingerprinting products, two colleagues cracked the
system by using a paper photocopy of a finger. They placed it on the
fingerprinting pad and pressed it with another finger to provide the
heat that the pad needs to detect. I was incredulous of their account,
but after reading the Putte source below, this sounds credible.

-----Original Message-----
From: Job de Haas [mailto:job@itsx.com]
Sent: Monday, January 26, 2004 6:37 AM
To: pen-test@securityfocus.com
Subject: Re: Hacking USB Thumbdrives, Thumprint authentication

Hi,

> I'm interested in research regarding hacking USB drives unlocked with
> a thumbprint
>
> http://www.thumbdrive.com/prd_info.htm
>
> Or any thumbprint biometric hacking.

On fingerprint hacking the first and best expert I know is
Ton van der Putte:

http://www.keuning.com/biometry/

Someone that did a similar thing:

T. Matsumoto:

http://www.itu.int/itudoc/itu-t/workshop/security/present/s5p4.pdf

I've seen the gummies (some only sub-millimeter thick) and they work
with kitchen equipment despite 'skin detection' 'heart beat detection'
etc.

Regards,

Job

------------------------------------------------------------------------

---
------------------------------------------------------------------------
----
 
     =====================================================================
     
     Please note that this e-mail and any files transmitted with it may be 
     privileged, confidential, and protected from disclosure under 
     applicable law. If the reader of this message is not the intended 
     recipient, or an employee or agent responsible for delivering this 
     message to the intended recipient, you are hereby notified that any 
     reading, dissemination, distribution, copying, or other use of this 
     communication or any of its attachments is strictly prohibited.  If 
     you have received this communication in error, please notify the 
     sender immediately by replying to this message and deleting this 
     message, any attachments, and all copies and backups from your 
     computer.
---------------------------------------------------------------------------
----------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:46 EDT