RE: Biometric question

[sanjay.patel () rexwire com]

Actually a recent study showed that it was possible to fool retina scan
instruments by using a high color picture of the eye.

-Sanjay

-----Original Message-----
From: Naveed Ahmed [mailto:naveed.ahmed () vinciti com] 
Sent: Thursday, November 07, 2002 2:06 PM
To: msconzo () tamu edu; security-basics () security-focus com
Subject: RE: Biometric question


Michael is right.
the better ones are ( at least relatively more difficult to fake) retina
scans and  voice recognition. dont go by what tom cruise does in
'minority report' with the eye balls.!!! rgds -Naveed

-----Original Message-----
From: Michael Sconzo [mailto:msconzo () tamu edu]
Sent: Thursday, November 07, 2002 10:43 PM
To: security-basics () security-focus com
Subject: RE: Biometric question


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

One of the more memorable things that I have read about fingerprint
scanners is: http://www.counterpane.com/crypto-gram-0205.html#5

You can basically fake a fingerprint biometric machine with a gummi
bear.  If I remember correctly, the majority of fingerprint scanners are
vulnerable to this type of attack. One of the big things to look for is
one that samples SHAPES not POINTS, and remember the more the merrier.

As for other types of biometrics, I am not too sure, hopefully somebody
else can shed some light on those.

- -mike


- -----Original Message-----
From: Felix Cuello [mailto:felix () qodiga com]
Sent: Wednesday, November 06, 2002 1:27 PM
To: security-basics () security-focus com
Subject: Biometric question



Hello list!

   I will work in a project where phisical security will be based on
   biometrics, in fact only will be based on fingerprints biometric.

   How secure are fingerprints?, what biometric are more secure? (voice,
   eye, ??? what else).

   I'm not a security expert :-)

   Thanks a lot,

   Felix
   [my english is bad... please sorry :-)]

- --
Felix Cuello
felix () qodiga com

Qodiga/its
Av.Santa Fe 882 P.13 Of. "E"
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPcqfKy76iJsaBRvcEQJ4GQCg8IIGDvldPOk6Bll7RV8spScjPDAAoPuy
DzeFhJhhlLBeyqWGS/NABATs
=kUtf
-----END PGP SIGNATURE-----