Re: SecureIDE with Fingerprint Reader: Email from company..

From: nemo outis (outis_at_erewhon.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 00:19:03 GMT

In article <2ECkd.3310$IQ.2714@bignews6.bellsouth.net>, "ChaosBlizzard" <ChaosBlizzard@no_spam_*hotmail*.com> wrote:
..snip...
>Is he right about fingerprint's being so easy to bypass?
>He obviously wants a response.. So I will see what anyone here would like to
>say.
>
>Thanks!

Yes, fingerprint IDing is (often) easy to bypass.

Aside from the brute force (but still very effective)
method of faking the fingerprint itself there is another
alternative.

Most fingerprint readers use astoundingly primitive technology.
For instance, many are USB but there is NO authentication of the
fingerprint reader to the computer or vice versa. Moreover, the
communication channel is usually not encrypted - you need only
learn the transmission format.

This leads to all the standard exploits, such as MITM, replay,
etc., etc.

Regards,

Relevant Pages

  • unknown password needed to get to desktop
    ... I previously asked for help on how to bypass the logon ... process and go directly to the desktop on Windows XP and ... got a response on how to do this. ...
    (microsoft.public.windowsxp.newusers)
  • Re: 3vl 2vl and NULL
    ... >> After David decided to bypass my response to his challenge, ... but that you put forth a challenging question ... so I indicated a by-product of some of the SQL issues. ... I knew the thought was less than crisp, so I anticipated a response ...
    (comp.databases.theory)
  • Re: Created Date and User who Created
    ... If you dont know the answer please ... People will bypass if there is a ... The original question was vague and Jeff's response was absolutely valid. ... Jay ...
    (microsoft.public.access.tablesdbdesign)
  • Re: AC question, whats the circuit board in the compressor cabinet?
    ... Northman had written this in response to ... just want to verify before I do. ... I need to remove the com wire and move ... bypass it to diagnose that component vs the contactor. ...
    (alt.home.repair)