Home page logo
/

pen-test logo Penetration Testing mailing list archives

RE: Hacking USB Thumbdrives, Thumprint authentication
From: "Deras, Angel R./Information Systems" <derasa () MSKCC ORG>
Date: Mon, 26 Jan 2004 14:43:12 -0500

When we investigated fingerprinting products, two colleagues cracked the
system by using a paper photocopy of a finger.  They placed it on the
fingerprinting pad and pressed it with another finger to provide the
heat that the pad needs to detect.  I was incredulous of their account,
but after reading the Putte source below, this sounds credible.

-----Original Message-----
From: Job de Haas [mailto:job () itsx com] 
Sent: Monday, January 26, 2004 6:37 AM
To: pen-test () securityfocus com
Subject: Re: Hacking USB Thumbdrives, Thumprint authentication


Hi,

I'm interested in research regarding hacking USB drives unlocked with 
a thumbprint

http://www.thumbdrive.com/prd_info.htm

Or any thumbprint biometric hacking.

On fingerprint hacking the first and best expert I know is
Ton van der Putte:

http://www.keuning.com/biometry/

Someone that did a similar thing:

T. Matsumoto:

http://www.itu.int/itudoc/itu-t/workshop/security/present/s5p4.pdf

I've seen the gummies (some only sub-millimeter thick) and they work
with kitchen equipment despite 'skin detection' 'heart beat detection'
etc.

Regards,

Job


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



 
     =====================================================================
     
     Please note that this e-mail and any files transmitted with it may be 
     privileged, confidential, and protected from disclosure under 
     applicable law. If the reader of this message is not the intended 
     recipient, or an employee or agent responsible for delivering this 
     message to the intended recipient, you are hereby notified that any 
     reading, dissemination, distribution, copying, or other use of this 
     communication or any of its attachments is strictly prohibited.  If 
     you have received this communication in error, please notify the 
     sender immediately by replying to this message and deleting this 
     message, any attachments, and all copies and backups from your 
     computer.


---------------------------------------------------------------------------
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault