At 04:23 PM 4/18/00 -0400, Patrick Henry wrote: >and it might be possible for someone to lift a latent fingerprint from >your work area and make a rubber finger. The device supposedly has some >type of "live finger" detector though. This would be a great project for the lab-inclined folks when they tire of torturing smartcards. Ie, demonstrate that you can image a working print and fab a working duplicate that spoofs a given biometric system. *Has* anyone published any such attacks? First you'd develop and image enhance the actual print; then you'd print it in a special ink which would repel (or attract) a molding compound, which when cured and peeled, would have the requisite structure. Or maybe you could laser-carve the molding compound; hobbyist systems for doing ceramic or wood are only a few thousand $. There's also photolitho techniques. Getting the electronic properties of the duplicate matched might require extra tricks, like a conductive backing. But flesh varies, so there is an acceptance window. Maybe the spooklabs package their fakeprints in humidity-controlled foil packages, use one hour after opening.
