A member of the longstanding Chaos Computer Club has shown off a method of taking a fingerprint, which could be used for biometric access, from a photograph.
A demonstration of the method, shown below in a video, was displayed at the weekend, and shows Jan Krissler, a member of hacker collective, the Chaos Computer Club, claiming its partial success on cracking biometrics.
The video, which was taken at the Chaos Club's conference, is available in both German and English. It shows the hacker claiming to have taken a photo of the hand of a German minister. That photo is then used to create a digital fingerprint, which in turn could be used to spoof the minister.
In text that accompanies the video, which we have had to translate, the group explains that this method, which requires a high resolution camera and some time, will do away with the need to take a fingerprint from a physical thing like a glass or cup, or hack a login system directly.
"In recent years, has been repeatedly demonstrated successfully how easy fingerprints are imitating. It was previously always necessary, the owner to steal an object with a smooth surface, such as a glass or a smartphone. In this video, new methods are presented that do away with the obstacle," the group explains.
"Previously, it was believed that it was necessary for such attacks are in the immediate vicinity of the person. The lecture is to make clear that this is not so. We present the results of investigations which show that biometric characteristics and password inputs can be spied from a distance, or remotely by mobile phone cameras directly or indirectly, through reflections in the eye."
The group suggested that following this all politicians should wear gloves.
Open source solutions provider makes acquisition in bid to shore up cloud development tools business
Aims to "end data bottlenecks"
Looking to boost your career in IT? Here are the best-earning roles out there!
The BlackBerry KeyOne is a strange device that brings the best of BlackBerry and Android together in a Qwerty-equipped package, but it won't be for everyone