News for hackers. Stuff that matters.
Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by Simucal on Monday July 16, 2012 @12:07PM (#4251234)
Mythbusters was able to defeat several fingerprint identification systems quite easily.

At first their attempts were pretty elaborate. They lifted a fingerprint from a glass a person had held and then used an acidic solution to etch that pattern onto a mold. This mold then opened all of the high-end thumbprint readers they had.

However, if I remember correctly, they then went low-tech and simply used a photocopy of the thumbprint which also opened several devices.

Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by sophacles on Monday July 16, 2012 @12:40PM (#4251398)
I think it is good to remember that security is situational. So unless a prisoner is holding a copy of every officer/guard/transfer agent's finger prints, they won't be able to undo the lock while in most detention situations (the only ones I can come up with are fairly contrived, or require the prisoner to escape in cuffs, making the point moot). Basically, if the arresting officer puts the cuffs on the detainee, and scans in his fingerprint as the "unlock with this fingerprint" option, it becomes very difficult for the detainee to get a copy of that print in a form that will work, and then use it, unlike an accessible hidden key known to work with $model-of-handcuff.

Of course that says nothing about other ways to defeat the cuffs, which would probably become the prime area of research at that point. (why attack the locking mechanism if there are easier to defeat weaknesses).

Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by sbov on Monday July 16, 2012 @01:07PM (#4251535)
According to the article, that's not how handcuffs need to work.

Handcuffs are designed so that one officer can put them on and another can take them off. If that weren't the case this situation of being able to print 1 key for all handcuffs wouldn't exist - they would simply make unique keys per handcuff.

Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by sophacles on Monday July 16, 2012 @01:23PM (#4251624)
Fair enough, although, I think a procedure change and a "transfer authority" function could easily cover this. The transfer function would basically be: original cuffer presses the transfer button, swipes his print, the receiver then swipes his print, and the transfer is done.

However, in a broader view, yeah, there are probably better ways than fingerprints handle keys once electronic locking mechanisms are introduced. Probably something akin to a 2-factor cryptographic mechanism.

Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by cswetenham on Monday July 16, 2012 @04:47PM (#4252566)
Just for interest, this still can be done with unique keys: Officer Alice handcuffs prisoner and wants to hand off to Officer Bob. Officer Bob locks prisoner with his own handcuffs (prisoner is now wearing two pairs), then Officer Alice removes hers.
Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by pavel_lishin on Monday July 16, 2012 @02:54PM (#4251954)
Easy nitpick, what if one of the officers gets sick, gets injured, or just plain forgets and goes home?
Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by sophacles on Monday July 16, 2012 @03:11PM (#4252023)
Good question. I don't know, but perhaps an override key. However now that the physical key isn't an open secret, and needed by everyone, they would be easier to secure. And small batches would have a specific key for that batch, but not for all cuffs, making it even harder for the detainee to have the right duplicate on hand.

I feel though that my larger point is getting lost in this thread. It was/is:

Just because a security technology doesn't work for reason $x in situation $y, that doesn't mean that the weaknesses also apply to situation $z.

Re:Hacker Opens High Security Handcuffs With 3D-Printed And ... by derrida on Monday July 16, 2012 @12:47PM (#4251443)