HOWTO Beat Fingerprint Scanners: With Play-Doh

from the fun-with-fingers dept

While researchers are constantly trying to come up with new biometric security methods, the fingerprint scanner has established itself as a trusted piece of equipment, even making its way onto laptops and mobile phones. But a new study says that 90% of scanners can be fooled by a fingerprint made from Play-Doh. As Engadget points out, that's good news for people worried about losing their fingers to thieves. No word, however, on the effectiveness of Silly Putty.


Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    heather, Dec 12th, 2005 @ 11:48am

    wouldn't the fingerprint be backwards?

    hello? why would they accept a backward print?

     

    reply to this | link to this | view in thread ]

  2.  
    identicon
    bucket, Dec 12th, 2005 @ 11:51am

    Re: wouldn't the fingerprint be backwards?

    "...by taking a mold of the mark’s finger, filling the mold with Play-Doh, and using the fake digit to gain access."

     

    reply to this | link to this | view in thread ]

  3.  
    identicon
    Stephen Tillman, Dec 12th, 2005 @ 12:01pm

    No Subject Given

    Silly putty would actually not work. The silicone-base of the silly putty is to "fluid". It would lose the shape of the print long before it was used.

    But, the question remains now... if I had a picture of your fingerprint (probably in newsprint), would I be able to use the "comic copy" effect to dupe your print? And what about if I stretch it out? would it work then?

    Ok... now I'm just being silly.

     

    reply to this | link to this | view in thread ]

  4.  
    identicon
    Wireless Guy, Dec 12th, 2005 @ 12:07pm

    That is why

    The military never has accepted any fingerprint system without some other version of biometrics around that technology. Simply putting in a system that would look for heartbeat associated with the print at the same time would increase security 20 times over. If the military doesn't allow it, why should you? I mean you can send Secret material in postal mail.

     

    reply to this | link to this | view in thread ]

  5.  
    identicon
    PJ, Dec 12th, 2005 @ 12:39pm

    Re: That is why

    That's heartening to know.

     

    reply to this | link to this | view in thread ]

  6.  
    identicon
    Brad Tarver, Dec 12th, 2005 @ 12:53pm

    Gummi Bears work too according to Crypto-Gram

     

    reply to this | link to this | view in thread ]

  7.  
    identicon
    Scotticus, Dec 12th, 2005 @ 1:52pm

    I've also heard

    Gummi bears can make nice fingerprint molds, as well. For an extra bonus, you can eat the "evidence" once you're done using it!
    NOTE: Before when your fingerprint scanner is sticky!

     

    reply to this | link to this | view in thread ]

  8.  
    identicon
    Stephen Pray, Dec 12th, 2005 @ 2:11pm

    law enforcement

    Ok, cool. so you think i might fool the highway patrol or the dmv and get a fake id? all i have to do is make the fake digit (umm whos could i use? could i make my own little loops and arches?) and then convince the DPS that rubber finger is really mine.. but i am in texas.. might work...

     

    reply to this | link to this | view in thread ]

  9.  
    identicon
    Jeremy, Dec 12th, 2005 @ 2:12pm

    No Subject Given

    Anybody watch the Bourne Supremecy movie. Remember how the dude lifted a finger print with tape and transplanted it somewhere else. Try it it works.

     

    reply to this | link to this | view in thread ]

  10.  
    identicon
    Rikko, Dec 12th, 2005 @ 2:32pm

    Re: No Subject Given

    But, the question remains now... if I had a picture of your fingerprint (probably in newsprint), would I be able to use the "comic copy" effect to dupe your print? And what about if I stretch it out? would it work then?

    As long as you don't put the silly putty on printed material or that'll be a DMCA violation and they'll try you as a witch.

     

    reply to this | link to this | view in thread ]

  11.  
    identicon
    Chris Maresca, Dec 12th, 2005 @ 2:59pm

    Can't rotate the password...

    The problem with ALL biometric technology is that once they are hacked (and the fingerprint thing is not new), you can't rotate the password or reissue the token.

    Eventually, all of the authentication technologies based on physical attributes will be useless as they will be in some way compromised. A better solution would be two-factor authentication with something you have (eg. a piece of hardware) being the second factor, not your physical characteristics...

    Chris.

     

    reply to this | link to this | view in thread ]

  12.  
    identicon
    Anonymous Coward, Dec 12th, 2005 @ 3:12pm

    Re: Can't rotate the password...

    It is true that any biometric form of authentication can be compromised. I truly think biometrics is a great idea, however. Lets say you were at the ATM, why can't we use biometric fingerprint scanners to pull up your accounts, and then combine that with a pin number. This eliminates an ATM card, and to be honest, if someone knows your PIN, it's a lot easier to steal an ATM card than it is to steal your fingerprint.

     

    reply to this | link to this | view in thread ]

  13.  
    identicon
    s, Dec 12th, 2005 @ 3:16pm

    Re: Can't rotate the password...

    a piece of hardware? how is that more secure than using two biometric security methods? if someone can get my finger print and lets say iris pattern or dental pattern...they can probably get my piece of hardware.

    and the reality is that everything can be hacked w/ time and money. the key is slowing them down enough to detect the hack or complicating it enough to create more room for error.

     

    reply to this | link to this | view in thread ]

  14.  
    identicon
    Matt, Dec 12th, 2005 @ 7:24pm

    gummy bear

    i was in an internet security class, and we had to find things that might work to bypass a fingerprint reader. all kinds of people brought int things and the one that worked most often was a gummy bear. the clear crappy tasting ones. as long as some one has used the finger print read before, it would pickup the residual fingerprint and unlock the computer.

     

    reply to this | link to this | view in thread ]

  15.  
    identicon
    flex, Dec 12th, 2005 @ 7:53pm

    Re: wouldn't the fingerprint be backwards?

    finger scanners just pick up a number of main points on your finger... they must only match the same as how it was enter'd into the system. they are a simple tool to use, but we must also remember that for the majority of users, they are..excuse me but ignorant to how things really work, and won't take the time to research anything.

     

    reply to this | link to this | view in thread ]

  16.  
    identicon
    Saruman, Dec 13th, 2005 @ 2:14am

    Re: That is why

    I agree. Problem is, most any biometric can be faked, if it relies on only 1 or 2 factors. Lets take Gattaca (dna via blood), Alien Resurrection (breath and voice analysis), Star Trek (voice and eyeball scan), X-Men (eye scan, voice)...all of the above mentioned movies show ways on how the system can be defeated, no matter how near or far into the future you go (or mutated you are =).
    Pretty much the only way to get it right is to submit a full body into the process, and account for every aspect of a human being, including weight, age, skin color, hair, eyes, dna, brainwave patterns, foot and finger prints, breaks in bones, medical conditions.... I can go on with a mile long list. Come up with a system that can do all that, and I can guarantee that every gov't and corporate entity will want a piece of that technology. And you can kiss all your freedoms goodbye =)

     

    reply to this | link to this | view in thread ]

  17.  
    identicon
    Stephen Tillman, Dec 13th, 2005 @ 10:39am

    Re: No Subject Given

    Rikko, It would be a DMCA violation only if you are copying the finger itself. afterall, it is the Digital Millennium Copyrigth Act. Now, however, I'll probably be burned at the stake for such a horrible pun.

     

    reply to this | link to this | view in thread ]

  18.  
    identicon
    Digitarius, Dec 13th, 2005 @ 12:44pm

    Diabetics

    I'm a type I juvenile diabetic, and Fingerprints are something I've always wondered about. As part of my disease I test my blood sugar regularly, which involves lancing my fingertips. At a minimum of three times a day. You can tell it, too! On a particularly bad day, they can get to look like raw hamburger if one isn't careful.
    So, my question is: Do all this pricks and microscabs on there alter my fingerprints? POssibly in ways that would make a run-of-the-mill system reject my own finger?

     

    reply to this | link to this | view in thread ]

  19.  
    identicon
    sharah, May 10th, 2006 @ 1:42pm

    why play do

     

    reply to this | link to this | view in thread ]

  20.  
    identicon
    Donald Duck, Nov 25th, 2006 @ 11:56pm

    Finger Print Scanner SUCKS

    Youtube has it they did every thing yall thought up and it works. youtube com/watch?v=oXyFmieZjiE techdirt doesn't want you to post urls in here I guess.

    Besides mission impossible movies would have a 'fake skin' with the finger prints on it. I'm sure we have the tech to do that for real.

    If you was really insidious you can grow real skin in the lab on a mold of the persons finger print your trying to fake. Perhaps spray it with some sort of preservative for the time when you need to slip it on.

     

    reply to this | link to this | view in thread ]

  21.  
    identicon
    john, Aug 10th, 2007 @ 3:24pm

    fingerprint scanner

    I beat the print scanner at work . Make a print in silly putty, put a couple laters of liquid latex in the mold until thick enough to handle, peel the new "print" out of the mold, works like a champ.

     

    reply to this | link to this | view in thread ]

  22.  
    identicon
    Chris, Jan 12th, 2008 @ 11:37am

    Re: fingerprint scanner

    a can u please explain that trick to me becuase i need to beat this fingerprint scanner....

     

    reply to this | link to this | view in thread ]

  23.  
    identicon
    Anonymous Coward, Nov 22nd, 2008 @ 8:42pm

    Just use a latex glove and the last print that was picked up by the scanner will be read as yours

     

    reply to this | link to this | view in thread ]

  24.  
    identicon
    Kevin Funches, Oct 30th, 2009 @ 7:06am

    beqating fingerprint analysis

    Please advise on where I Can obtain the ingredients for making my fingerprints not readable. Are there stores that sell fake fingerprints, if so where?

     

    reply to this | link to this | view in thread ]

  25.  
    identicon
    tyson champion, Dec 7th, 2009 @ 8:39pm

    prints

    can you earase your prints wit sand paper enough so that it will not read that its yours

     

    reply to this | link to this | view in thread ]

  26.  
    identicon
    James, Mar 12th, 2010 @ 4:50pm

    Are you stupid?

     

    reply to this | link to this | view in thread ]

  27.  
    identicon
    James, Mar 12th, 2010 @ 4:54pm

    Are you stupid?

    Everyone who has previously placed a comment appears to be dumb. You are all considering using the silly putty as a mould . Wow, internet reading has just become a hell of a lot more hilarious. Anyone think to use some sort of powder such as flour... dust it onto the scanner, lightly of course. Place sellotape over that. Then put silly putty on top that so it does not read your fingerprint apply pressure then voila :) Hope you all realized how dumb you all were.

     

    reply to this | link to this | view in thread ]

  28.  
    identicon
    jo, Jun 2nd, 2010 @ 7:46pm

    @ James, no actually your comment is dumb. If you did the that the fingerprint scanner would deny your prints as not of good quality. After 5x of that then the state does a name search. ANd iM SURE THAT IS WHAT THESE PEOPLE ARE TRYING TO AVOID! You want the scanner to think your prints are ok and to pass you through without cross referencing your name.

     

    reply to this | link to this | view in thread ]

  29.  
    identicon
    mad man, Mar 23rd, 2011 @ 3:39am

    u all dumb asses ,, what u ar all saying is applicable only when you alone have access to the machine , so what hapends if a security man is there to monitor fools like you? comone say what could be used in any security system

     

    reply to this | link to this | view in thread ]

  30.  
    identicon
    ashish, May 15th, 2011 @ 4:10am

    video for finger print

    this video will help u to copy ur finger print,,,have fun
    http://www.metacafe.com/watch/1070335/copy_your_fingerprint/

     

    reply to this | link to this | view in thread ]

  31.  
    identicon
    Maddison, Mar 1st, 2014 @ 4:48am

    Hkdhj

    Play dog

     

    reply to this | link to this | view in thread ]

  32.  
    identicon
    deepika, Mar 25th, 2014 @ 10:51am

    can the fingerprint in ATM systems be accessed again using any of the spray?

     

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories
A word from our sponsors...

Close

Email This