Finger print best thing to prevent hacking?

[Thekool1s]

Well i was thinking almost every laptop has this feature. Why not enable a system which use finger print to send payments this will eliminate the hacking. Iphone too has finger print so this can be applied if done properly what do you think guys?

[shorena]

Fingerprints are bad for 3 simple reasons
#1 cant change them (well, 10 times)
#2 you leave them literally everywhere
#3 easy to fake, CCC iPhoneX fingerprint hack took hours after release.


edit: link for 3 www.ccc.de/de/updates/2013/ccc-breaks-apple-touchid note: its in german, duh.

[fryarminer]

Well i was thinking almost every laptop has this feature. Why not enable a system which use finger print to send payments this will eliminate the hacking. Iphone too has finger print so this can be applied if done properly what do you think guys?

Ok, how am I'm out of the loop - almost every laptop takes fingerprints now? (Sorry I haven't used Windows in years.)

[Soros Shorts]

Well i was thinking almost every laptop has this feature. Why not enable a system which use finger print to send payments this will eliminate the hacking. Iphone too has finger print so this can be applied if done properly what do you think guys?

Ok, how am I'm out of the loop - almost every laptop takes fingerprints now? (Sorry I haven't used Windows in years.)

No, not every laptop has a reader, but Windows now has built in Biometrics support based on standard driver models.

[shawshankinmate37927]

Cryptography is the best way to prevent hacking as long as private keys are randomly generated offline and kept offline.

[kwukduck]

- What you know.
- What you have.
- What you are.

Combining them is great. Using just one of them as your ultimate method of authentication is quite weak security.

[SirChiko]

It could still be bypassed by cutting the other person's finger or making them to do it with gun next to their head.
Or am i watching too mutch tv? 

[R2D221]

Well i was thinking almost every laptop has this feature.

Where do you live? Here in Mexico few laptops actually have them (and nobody cares, anyway).

[franky1]

problem with fingerprints..
1) cut ur thumb and it leaves a scar. your now locked out as the scar has messed up ur fingerprint
2) get a blister on your thumb from hard work, as the skin dries and hardens as a separate layer not yet broken away, this too messes up the fingerprint
3) know someone that is into bitcoin and knows ur fingerprint protected? DO not allow him to buy you a drink and then let him carefully take the empty glass/bottle out of your sight


my computer has its data encrypted and the password is a long code. i dont even need to type it in or remmber it as my computer has a webcam and i simply show the webcam a QRcode and my program reads the qr code and decrypts the data.

its be-spoke, thus hackers cant easily pre-make scripts to intercept the data as they have no previous knowledge of how my bespoke program deals with it, even if they hack the webcam drivers to grab my QR code. its useless without knowing the other features my bespoke software needs. which i wont reveal.

but a webcam and QR code is simple.

i can name multiple other methods to secure your computer

[Kprawn]

It could still be bypassed by cutting the other person's finger or making them to do it with gun next to their head.
Or am i watching too mutch tv? 

The latest Biometric fingerprint scanners, have built in technology, that detect, if it's a "living" finger. {My friend installs them, and demonstrated it, with a rubber finger mold, of his own} I do not know, if the cheaper versions, have the same, detection technology built in.

When you configure the device, you scan more than one finger, to eliminate the risk of having "scars" or "blisters" on a finger, locking you out of your own system. 

You could combine this with a retina {Eye} scanner, if you want more security.   



 

[Newar]

problem with fingerprints..
1) cut ur thumb and it leaves a scar. your now locked out as the scar has messed up ur fingerprint
2) get a blister on your thumb from hard work, as the skin dries and hardens as a separate layer not yet broken away, this too messes up the fingerprint
[...]

The software is smarter than you and usually let's you scan as many different fingers as you wish (at least Lenovo Thinkpads). To unlock any one finger will work.

In general I however agree: bad idea.


How did you make the QR code solution? Which OS?

[frankenmint]

problem with fingerprints..
1) cut ur thumb and it leaves a scar. your now locked out as the scar has messed up ur fingerprint
2) get a blister on your thumb from hard work, as the skin dries and hardens as a separate layer not yet broken away, this too messes up the fingerprint
[...]

The software is smarter than you and usually let's you scan as many different fingers as you wish (at least Lenovo Thinkpads). To unlock any one finger will work.

In general I however agree: bad idea.


How did you make the QR code solution? Which OS?

looks proprietary - til bespoke is a uk word to mean customized software - probably uses windoze some random distro with a crazy long passord and has webcam enabled with a 3rd peice of software to be able to interpret the qr code and enter it into the password txt field.

edit:  found this little gem so you can diy it too: http://blog.self.li/post/14864315302/qr-login-howto
nvm its WAAAY COOLER but definitely infinitely more complicated and probably not worth the effort for an at-home non edward snowden type.


And also, I forgot what youtube video I was watching, but they had a suggestion to use a transparency that needs to be folded over itself two or three times to 'reveal' the code.  Hypothetically, you could print this and leave the peices of the private key in different secure locations.  

I think Fingerprints and nfc 'bump to pay' are nice and seamless, but those are the things that can totally be spoofed.  I would be more apt to run NFC if there was a separate RFID confirmation key within proximity (although if someone were to clone your phone then and there and attempt to send your money to their own bitcoin address it would probably circumvent that too)  I like the combination approach that involves confirmation via fingerprint AND retina scan and also using a password.

[Newar]

[...]
looks proprietary - til bespoke is a uk word to mean customized software - probably uses windoze some random distro with a crazy long passord and has webcam enabled with a 3rd peice of software to be able to interpret the qr code and enter it into the password txt field.

edit:  found this little gem so you can diy it too: http://blog.self.li/post/14864315302/qr-login-howto
nvm its WAAAY COOLER but definitely infinitely more complicated and probably not worth the effort for an at-home non edward snowden type.

Of course I was thinking DYI, proper bespoke :-)  . I'm looking for something to log in the OS on an offline PC though.

[franky1]

yep i meant be-spoke as in DIY (i made it myself). im not that into using third party tools. especially bitcoin related tools (id never use someone elses trading bot for instance), i dont even use the GUI for bitcoin. just the bitcoinD and my own bespoke GUI.

and i am totally against the idea of NFC. theres already scenario's of people brushing their NFC readers against the hips of passers-by on subway platforms to attempt to grab data

[SirChiko]

It could still be bypassed by cutting the other person's finger or making them to do it with gun next to their head.
Or am i watching too mutch tv? 

The latest Biometric fingerprint scanners, have built in technology, that detect, if it's a "living" finger. {My friend installs them, and demonstrated it, with a rubber finger mold, of his own} I do not know, if the cheaper versions, have the same, detection technology built in.

When you configure the device, you scan more than one finger, to eliminate the risk of having "scars" or "blisters" on a finger, locking you out of your own system. 

You could combine this with a retina {Eye} scanner, if you want more security.   



 

Well but how does it detect if it's alive or not? It wouldn't be so hard to heat finger to 38 degrees if it would be based on teperature.

[franky1]

It could still be bypassed by cutting the other person's finger or making them to do it with gun next to their head.
Or am i watching too mutch tv? 

The latest Biometric fingerprint scanners, have built in technology, that detect, if it's a "living" finger. {My friend installs them, and demonstrated it, with a rubber finger mold, of his own} I do not know, if the cheaper versions, have the same, detection technology built in.

When you configure the device, you scan more than one finger, to eliminate the risk of having "scars" or "blisters" on a finger, locking you out of your own system. 

You could combine this with a retina {Eye} scanner, if you want more security.   

Well but how does it detect if it's alive or not? It wouldn't be so hard to heat finger to 38 degrees if it would be based on teperature.

barclays banks are already trying out vein readers...
http://www.barclays.com/news/2014/September/barclays-first-in-uk-to-launch-new-biometric-reader-for-customer.html

[pawel7777]

The latest Biometric fingerprint scanners, have built in technology, that detect, if it's a "living" finger. {My friend installs them, and demonstrated it, with a rubber finger mold, of his own} I do not know, if the cheaper versions, have the same, detection technology built in.

When you configure the device, you scan more than one finger, to eliminate the risk of having "scars" or "blisters" on a finger, locking you out of your own system. 

There's another issue, a lot of people have unreadable fingerprints, I know at least 2. Both of them failed to had theirs taken for the biometric passport purpose. I'm sure there are more of people with this 'problem' worldwide.

[Kprawn]

It could still be bypassed by cutting the other person's finger or making them to do it with gun next to their head.
Or am i watching too mutch tv? 

The latest Biometric fingerprint scanners, have built in technology, that detect, if it's a "living" finger. {My friend installs them, and demonstrated it, with a rubber finger mold, of his own} I do not know, if the cheaper versions, have the same, detection technology built in.

When you configure the device, you scan more than one finger, to eliminate the risk of having "scars" or "blisters" on a finger, locking you out of your own system. 

You could combine this with a retina {Eye} scanner, if you want more security.   



 

Well but how does it detect if it's alive or not? It wouldn't be so hard to heat finger to 38 degrees if it would be based on teperature.

fingerprint sensor uses radio frequency scanning to detect the sub-epidermal layers of your skin, a dynamic that requires the owner of the finger to be alive and attached to the finger being used.

Read here --> http://mashable.com/2013/09/15/severed-finger-iphone-5s/

[shorena]

I like how there is allready proof in the 1st reply that this can easily be hacked but none of you bothered to read it because you cant understand the language.

Here take a video [1] the hack was figured out within 48 hours of the release of the phone

Less than 48 hours after the iPhone 5s went on sale, a group of German hackers claimed to have lifted a fingerprint and created a fake finger that could spoof Apple's "advanced" biometric technology. But anyone who's been paying attention to biometrics wasn't surprised.

source [2] and uses no special equipment. The phone can "detect whether" its a "real finger" all it wants, because there is an acutal "real finger" behind the plasticprint.

[1] http://www.youtube.com/watch?v=xRjnDMgEJNM
[2] http://www.zdnet.com/apples-advanced-fingerprint-technology-is-hacked-should-you-worry-7000020998/

[TheButterZone]

http://blog.dustinkirkland.com/2013/10/fingerprints-are-user-names-not.html