Monday, December 31, 2018

Hackers Make a Fake Hand to Beat Vein Authentication

Aside from the totally obvious "I woke up with swollen hands and can't access my account" thing, it was just a matter of time before something like this defeated such a lame attempt at security.

Another method is so-called ‘vein authentication,’ which, as the name implies, involves a computer scanning the shape, size, and position of a users’ veins under the skin of their hand. But hackers have found a workaround for that, too. On Thursday at the annual Chaos Communication Congress hacking conference in Leipzig, Germany, security researchers described how they created a fake hand out of wax to fool a vein sensor.