EH-Net

Ethical Hacking Discussions and Related Certifications => Physical Security => Topic started by: jason on February 12, 2009, 09:08:13 PM

Title: Researchers hack facial authentication systems
Post by: jason on February 12, 2009, 09:08:13 PM

Facial authentication systems from Lenovo, Asus, and Toshiba have been defeated by researchers. Apparently a variety of methods were used, including presenting a picture of an authorized user to the system. Fun stuff! There will be a briefing on this next week at Blackhat DC.

http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Nguyen

http://www.darkreading.com/security/vulnerabilities/showArticle.jhtml;jsessionid=UZKD4O3AS4T0AQSNDLPSKH0CJUNN2JVN?articleID=213901113

Title: Re: Researchers hack facial authentication systems
Post by: BillV on February 13, 2009, 07:34:06 AM

Hmm, I'm surprised that news is so recent. Wasn't there an article about that a while back? I thought I had read something similar a while ago about presenting a picture to facial recognition software... the post about it was probably here in forums.

BillV

Title: Re: Researchers hack facial authentication systems
Post by: Equix3n- on February 13, 2009, 08:13:40 AM

Now that's scary especially considering the fact that biometric authentication is considered to be one of the most secure methods.
I guess Vijay will give us more info. after he attends the Blackhat DC briefing.

Title: Re: Researchers hack facial authentication systems
Post by: jason on February 13, 2009, 11:37:07 AM

There was a thread a while back about the Mythbusters episode where they tested fingerprint readers, similar technology, similar attacks, sounds like similar failures.

Title: Re: Researchers hack facial authentication systems
Post by: timmedin on February 14, 2009, 04:10:58 PM

I laughed when I first heard of this. Classic!

Title: Re: Researchers hack facial authentication systems
Post by: Jhaddix on February 24, 2009, 07:27:51 AM

Here is the video =)

https://media.blackhat.com/bh-dc-09/video/Nguyen/moss-nguyen-interview.m4v

Title: Re: Researchers hack facial authentication systems
Post by: jason on February 24, 2009, 03:26:16 PM

Thanks J!