Although fingerprint authentication has security flaws, modern laptops, tablets, and smartphones continue to use it to unlock devices and authenticate passwords. As phone cameras become increasingly powerful, security experts warn that stealing fingerprints from ordinary photos is becoming increasingly feasible.
Experts in China claim that photos showing fingers pointed directly at a camera could potentially reveal enough detail to recreate fingerprints. In theory, attackers could use the images to spoof biometric scanners attached to phones, laptops, payment systems or online accounts.
Expert Li Chang warns that photo editing software and artificial intelligence tools can create the fingerprint ridges hidden in everyday selfies. Jing Jiwu, a professor at the University of the Chinese Academy of Sciences, added that while lighting, motion blur and focus still complicate the process, high-resolution images can significantly improve the chances of extracting usable fingerprint data.
The discussion quickly went viral on Chinese social media platforms, mainly because the “peace” or “V” gesture remains a staple of selfies in much of Asia.
The basic idea isn't new. Security researchers have been demonstrating fingerprint reconstruction attacks for more than a decade, but advances in smartphone camera hardware are making things much easier.
The German biometrics researcher and member of Chaos Computer Club, Jan Krissler, bypassed Apple's Touch ID system shortly after its introduction in 2013. A year later, it demonstrated that it was possible to recreate the fingerprints of the German Defense Minister using publicly available photos of her hands.
At the time, however, the process was not practical for the general public. Reproducing fingerprints typically required multiple high-resolution images, controlled conditions, and specialized processing techniques. More recent demonstrations show that attacks are gradually becoming more widespread as modern smartphone cameras provide sharper images.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
