News for hackers. Stuff that matters.

A comment on Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8. Parent comment

Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by woodman on Tuesday May 23, 2017 @04:40PM (#14405120)
> ...if someone takes an IR high resolution, close photo of your iris they can defeat your security...

There are commercial security products that regularly perform "IR high resolution" iris scans from several meters away and require no cooperation from the target. Stanley CSS sold one that sat on top of a doorway over five years ago, their product literature says that you need to look at it - but having demoed it myself, I can say that is not true.

[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by bobsam on Tuesday May 23, 2017 @06:40PM (#14406021)
Have any real security researchers have tried to analyze and break this one?

Until CCC approves your CSS I will consider it insecure.

[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by woodman on Tuesday May 23, 2017 @10:54PM (#14407278)
You've misunderstood my point, which is that distant iris data collection from non-cooperative subjects is so easy now that vendors are selling solutions pretty cheaply. So using it for security, without additional checks in place, is like walking around with your pin written on your forehead.
[ Parent | on HN ]
Re:Chaos Computer Clubs Breaks Iris Recognition System of th... by Natanael_L on Tuesday May 23, 2017 @07:14PM (#14406270)
Lots are broken

https://www.forbes.com/sites/thomasbrewster/2015/03/05/clone...

[ Parent | on HN ]