Spoofing a fingerprint scanner - NEWBIE()

Spoofing a fingerprint scanner - NEWBIE()
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Spoofing a fingerprint scanner - NEWBIE() shamilton72 05-01-2006
Posted by on May 1, 2006, 1:59 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I was wondering if it is possible to spoof a fingerprint scanner, I am
particularly referring to the relatively cheap ones that you can get on
a computer mouse.

For a relatively cheap implementation of this system in order to log
onto a PC using a normal login ID and your scanned print, is there a
standard for how much data is required for each scanned print and in an
organisation of say 5,000 would the search be virtually instenteanous?

I would have thought fingerprint scanners built into computer mice
would be susceptible to dust and scratches (I'm thinking of a place
like a university where PC's have multiple users).

Any advice would be greatly appreciated.

Regards,

Sarah Hamilton.


Posted by Robert Moir on May 1, 2006, 2:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
shamilton72@hotmail.co.uk wrote:
> Hi,
>
> I was wondering if it is possible to spoof a fingerprint scanner, I am
> particularly referring to the relatively cheap ones that you can get
> on a computer mouse.
>
> For a relatively cheap implementation of this system in order to log
> onto a PC using a normal login ID and your scanned print, is there a
> standard for how much data is required for each scanned print and in
> an organisation of say 5,000 would the search be virtually
> instenteanous?
>
> I would have thought fingerprint scanners built into computer mice
> would be susceptible to dust and scratches (I'm thinking of a place
> like a university where PC's have multiple users).
>
> Any advice would be greatly appreciated.

rendering a shared device like this either inoperative or too disgusting for
any sane person to contemplate touching is fairly easy.

Actually fooling these devices... well...
http://www.yubanet.com/cgi-bin/artman/exec/view.cgi/8/28878
http://www.artemis-usa.com/gummybear.htm
you decide!

--
--
Rob Moir, Microsoft MVP
Blog Site - http://www.robertmoir.com
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
I'm always surprised at "professionals" who STILL have to be asked "Have you
checked (event viewer / syslog)".



Posted by Phillip Windell on May 1, 2006, 5:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I can't wait to the machine that requires a DNA sample. You'll have to pee
in a cup attached to the keyboard :-)
That's the freeware version...

The "pay" version...
As a side benefit, it may tell you if you are pregnant. ;-)

I've been fighting with our screwed-up Newsroom System for the last two
weeks plus 30 hours overtime. Today it seems to be working right,..I feel
like a "free man",..I'm delirious,...out-of-control,...I don't know what to
do with myself...somebody stop me!

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com



Posted by Jupiter Jones [MVP] on May 1, 2006, 10:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
One caution...
Not intended as a security device to protect financial data etc.
Use only for convenience.
See the note at the bottom of this page:
http://www.microsoft.com/hardware/mouseandkeyboard/features/fingerprint.mspx

That may answer your question.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


> Hi,
>
> I was wondering if it is possible to spoof a fingerprint scanner, I am
> particularly referring to the relatively cheap ones that you can get on
> a computer mouse.
>
> For a relatively cheap implementation of this system in order to log
> onto a PC using a normal login ID and your scanned print, is there a
> standard for how much data is required for each scanned print and in an
> organisation of say 5,000 would the search be virtually instenteanous?
>
> I would have thought fingerprint scanners built into computer mice
> would be susceptible to dust and scratches (I'm thinking of a place
> like a university where PC's have multiple users).
>
> Any advice would be greatly appreciated.
>
> Regards,
>
> Sarah Hamilton.



Posted by Chief on May 2, 2006, 5:07 am
If you were  Registered and logged in, you could reply and use other advanced thread options

...or you could chop of one of the users fingers . Muahahahah ;-

--
Chief

Similar ThreadsPosted
fingerprint scanner with multiple users August 16, 2007, 9:19 pm
Newbie questions... March 29, 2006, 2:13 pm
Kerberos newbie September 29, 2008, 4:05 pm
Newbie/spyware problems June 27, 2005, 4:49 am
Newbie question - keylogger July 6, 2005, 3:18 pm
Newbie -> Certificate revocation February 18, 2006, 8:06 pm
newbie question on security March 10, 2006, 6:25 am
How to install LDAP? Newbie July 11, 2006, 7:33 pm
Newbie Client Certificate Question December 1, 2006, 2:22 pm
Security Newbie questions bearshare June 30, 2008, 10:16 am

The site map in XML format XML site map

Contact Us | Privacy Policy