@nutbastard: So use encryption instead. If the user isn't logged in, that data is as good as gone.

Polybius

@newgalactic: People are very bad with passwords and codes. Encryption isn't fool-proof because there are too many fools who write down their password or codes or use weak passwords or codes.

bbfreak

@wlcrm: Your anti-post was longer than the actual post. Are you trying to create your own blog within a blog? lol

faabshaam

@nutbastard: If you marry a wifey that's THAT suspicious of what you're up to......You deserve to have her do all of that.

My comment was hypothetical, everyone knows that "adult" sites are way more fun when you share with her anyways.

faabshaam

@Petezah: Thats why the people running your office would rather you have to give up your finger than just yell out your password.

This is a physical authentication method, and is really just half of the preferred two-factor (something you have + something you know) authentication.

@lpranal:
An intruder doesn't need to cut off somebody's finger, they just need to make a gelatin mold of an authenticated person's finger and put it over their own finger. Moisten it with spit and this can defeat the combined heat, heartbeat, galvanic skin response, etc. readings. This has the added benefit of the authenticated person (and their organization) being unaware that they have had their prints copied, as they are not missing a finger, kidnapped, or dead.

I've mentioned this study before and even though its from 2002, I haven't seen anything that addresses these weaknesses: (see summary at the end) [cryptome.org]

from TFA:

The FS88 emits a "special signal" that, in conjunction with a sensor and an algorithm, can reportedly differentiate living finger "signatures" from those of other materials.

I actually bothered to read the company's page [www.futronic.com.hk] on their "special signal" and it looks like its either heartbeat detection or electrical conductivity.

Both of these can be defeated by a gummi mold over the intruder's finger, as the sensor picks up their heartbeat/skin/living-finger-ness, and reads the authenticated fingerprint mold.

Verdict: probably defeatable with $10 in materials.

wlcrm

Gain access? Just do what most infiltrators do: Work for the company.

ripfire4

@newgalactic: It's always bugged me. I'd rather they get into my office if they really want to using a stolen password than to get in using my severed finger. I find my fingers useful and would hate to lose one.

Petezah

@jetexas: hopefully it won't get lost, and you have to go and explain to a medical team how it happened....

flyboy

yeah but if wifey was clever she'd just boot with a linux cd and gain access to the NTFS partition without using Windows at all... of course you could have set a BIOS password, but then again, you can always reflash the BIOS...

I bet my buddy i could get into his windows shit without his password. I won that bet : )

nutbastard

This is great. Now, when you die, you don't have to worry about your wife using your dead finger to find out about all those "Stock exchange" sites you claimed to be on all the time.

faabshaam

@TheCyberBob: Must be why you're the International Man of Mystery *credits to Austin Powers franchise* and not me.

Geisrud

Palm scanners have been able to do that for at least ten years.

Bernie530

1) Cut off digit with access.
2) Cut off tip of own finger, surgical tape digit with access to gash.
3) Apply leech to digit with access to ensure blood flow
4) Scan for access, then remove leech/digit, bandage gash on self.

NeonCat

Force is so NOT necessary. Have a beautiful woman tell guard "I have always wanted to have hot, lusty sex in a restricted area, Baby." He will smack his ever-so-alive hand on it in a heartbeat. Then kill him. (Yes, you WOULD open it and you know it.)

Curves

I bet the Chalie's Angels will find a way to override this thing. They are beautiful and deadly...

VakeroRokero

I'm most likely dead if they cut my finger off. Do you really think I give a flying funk what happens to sensitive info once I'm dead?

Noobs-R-Us

@jetexas:
Disgusting (and funny) but effective?

Out2gtcha

Pfft. Just make sure you knock out the high ranking official, drag him to the computer to unlock it THEN kill him. Geez. What's the big deal? ;)

TheCyberBob

@everyone above

Assuming the designers aren't complete morons, the thing will use a combination of heat, heartbeat, and galvonic skin sensors (electrical skin conductivity) to allow access IF and only if all the requisite conditions are met (not a dead, cold, lifeless or gummi finger)

lpranal

@TheCapt: Ah, so you need to kill the guard, then quickly chop off a finger and scan it. Got it.

Geisrud

How dead does the finger have to be? Like, cold-dead? lukewarm-dead? has-a-pulse-because-I'm-squeezing-it-dead?

AndyDuncan

@jetexas: They could defeat that method with an odor sensor. (sniff sniff...)

SigmundTheSeaMonster

So, how exactly does one test a device to make sure it will reject a severed finger? Are there a couple of engineers at Futronics who are living without pinkies?

nucwin83

My guess is that it measures the O2 levels in the blood. Just like the clip on kind at the hospital. Then it doesn't matter what the temperature is (just came in from an extreme?).

TheCapt

@jetexas: Check!

MikeSWelch

and also could hook something up so that it has a heartbeat as well.

Lupison

Heat the finger up in the microwave first.

Lupison

@Out2gtcha: If that's the case, it sounds like you'd just need to keep the dead finger in your anus/vagina until right before use.

jetexas

So then the question now is HOW it differentiates a live finger from a non live one. If it's a thermal thing, then I'm sure someone out there is already devising a way to incorporate something to replicate the naturally occurring body heat in the finger.

Out2gtcha

How is it that biometrics has stayed "legitimate" as a security check for this long? You mean to tell me that dead fingers could have been used until now? Here's a clue, just stick to a Strong password that needs to be changed often.

newgalactic

Seeing as it can detect between a live and a dead finger, it's likely that all those don't work either.

Jason Chen

Does it pass the gummy bear test?

Geisrud

What about the Mythbusters methods?

For those that didn't see the show:
1: Fake fingertips made out of ballistics media
2: Copy paper wet with spittle

And yes, both worked.

HeartBurnKid

well there goes my plan of foiling yet another brilliant plan. Thanks Futronics and Gizmodo. What am I gonna do now with these Leatherman's I got off of amazon with free shipping over $25, huh?

that's what I thought =/

discounteggroll

The only significance of this gizmo will be to Hollywood movies. Now the old "cut off the hand" trick won't pass...

toddljones

the device comes with a USB plug, how safe can it really be? I'm not saying that the watchdog is ineffective, but maybe they should look at the door it's guarding.

joch

Does it bypass the paper finger that can fool most even high end scanners?

T3hG33k

@Curves:
Probably. Im a sucker for a long set of legs and a great but. Yeah, Im old school. Of course Im a guy so, any other "curves" thrown in there would be ok as well.....

Out2gtcha