{"id":1530,"date":"2017-04-19T09:21:44","date_gmt":"2017-04-19T13:21:44","guid":{"rendered":"http:\/\/courses.digitaldavidson.net\/dig215\/?p=1530"},"modified":"2017-04-19T09:22:56","modified_gmt":"2017-04-19T13:22:56","slug":"1530","status":"publish","type":"post","link":"https:\/\/courses.digitaldavidson.net\/dig215\/2017\/04\/19\/1530\/","title":{"rendered":"Unlocking your fingerprint passcode without your fingers"},"content":{"rendered":"

Passcodes can be hacked, but now it seems that fingerprints can be hacked too. A pair of detectives asked Anil Jain<\/a>, a professor of computer science and engineering at Michigan State University, to help them unlock a phone that was evidence in a murder investigation. The victim\u2019s Samsung Galaxy S6 phone required fingerprint identification to unlock. The detectives already had the victim\u2019s fingerprints (he had been arrested before) on plain printer paper. However, human skin is conductive and the whorls and ridges on our fingerprints create unique conductive patterns that biometric use. So the computer scientists tried printing copies of the fingerprints onto special conductive paper (similar to photographic paper). After some trial and error, the team was able to digitally enhance a victim\u2019s fingerprints and print these improved images onto conductive paper, successfully giving detectives access to his phone.<\/span><\/p>\n

\"\"<\/a>
The fingerprint passcode<\/a> for the Samsung Galaxy S6.<\/figcaption><\/figure>\n

What gave me pause toward the end of the article was the distinction between an alphanumeric passcode and a fingerprint passcode in the courts. A passcode is considered an intangible thought in the owner\u2019s mind and so police can\u2019t order a suspect to reveal his or her password. <\/span>But <\/b>a fingerprint is physical evidence, like blood, so the suspect can be ordered to produce his or her fingerprints. By this logic, a person <\/span>who is concerned about the police requisitioning their phone<\/del><\/span> should always use an alphanumeric passcode as a precaution. You can be legally forced to unlock your phone if you use a fingerprint passcode so an alphanumeric passcode would protect you from that situation. Yet breaking that passcode is much simpler – watch the person enter the code, see if there is a pattern on the glass, guessing birthdays or other common passwords, etc. <\/span><\/p>\n

For the detectives, the phone they were trying to access belonged to a deceased man. Since he was the victim, the detectives were allowed to access his phone. The victim\u2019s fingerprints were already on file so the detectives didn\u2019t need to request his fingerprints. But what should the average person do if they are concerned about the privacy of their phone after their death? In the interest of preserving privacy, should people request that their phone password be changed to an alphanumeric code by a trusted loved one before they die? This would preserve their phone from being used by any law enforcement and would give the loved one access to the phone. Or should a person use a fingerprint passcode, which would allow the police access to their phone but would restrict their friends and family from accessing the phone? In a way, I suppose it depends on what kind of secrets your phone holds and who you\u2019re trying to keep them from: the police or your loved ones. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Passcodes can be hacked, but now it seems that fingerprints can be hacked too. A pair of detectives asked Anil Jain, a professor of computer science and engineering at Michigan State University, to help them unlock a phone that was evidence in a murder investigation. The victim\u2019s Samsung Galaxy S6 phone required fingerprint identification to … <\/p>\n

Continue reading “Unlocking your fingerprint passcode without your fingers”<\/span><\/a><\/p>\n","protected":false},"author":124,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[203,204],"class_list":["post-1530","post","type-post","status-publish","format-standard","hentry","category-sightings","tag-fingerprints","tag-security"],"_links":{"self":[{"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/posts\/1530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/users\/124"}],"replies":[{"embeddable":true,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/comments?post=1530"}],"version-history":[{"count":2,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/posts\/1530\/revisions"}],"predecessor-version":[{"id":1533,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/posts\/1530\/revisions\/1533"}],"wp:attachment":[{"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/media?parent=1530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/categories?post=1530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/courses.digitaldavidson.net\/dig215\/wp-json\/wp\/v2\/tags?post=1530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}