Fingerprint breach found - change yours now

18cc

Article about a breach in fingerprint database found I'm sure it'll be the first of many

If I were you, if you use your fingerprint to log on to for example banking apps I would change your fingerprint now

No wait ...


https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-used-by-banks-uk-police-and-defence-firms

surreysaver

Why??????!

[Deleted User]

Sure I'll just change my fingerprint and my face...

oldagetraveller

I was under the impression that the fingerprint recognition is carried out using the phone's sensor?
When fingerprint log in etc. is set up and selected that fingerprint doesn't get transmitted to some database somewhere, surely? If so, how?
I personally don't use that method for logging into financial accounts anyway.
Oh, hang on, it's The Guardian!

Vet

isn't it suppose to be encrypted before it is sent? I've got the acid and scrubbers ready to start again.

Fingerbobs

I've never used fingerprint recognition for financial accounts, because I don't see the logic in using the same piece of security information both to unlock the phone and access my finance apps. If one is compromised or bypassed, so is the other.
The exception is the Curve app, which seems to have enabled fingerprint login without me asking it to, and there doesn't seem to be any way to turn it off.

colsten

Fingerbobs wrote: »

The exception is the Curve app, which seems to have enabled fingerprint login without me asking it to, and there doesn't seem to be any way to turn it off.

• in the Curve app, tap bars in the top left corner
• tap Settings
• turn off fingerprint
• close

boo_star

18cc wrote: »

Article about a breach in fingerprint database found I'm sure it'll be the first of many

If I were you, if you use your fingerprint to log on to for example banking apps I would change it now

No wait ...


https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-used-by-banks-uk-police-and-defence-firms

You're misunderstanding the story.

Biostar 2 uses fingerprints and facial recognition as part of its means of identifying people attempting to gain access to buildings.

Nothing to do with banking apps.

[Deleted User]

boo_star wrote: »

You're misunderstanding the story.



Nothing to do with banking apps.

I think that was the joke... :money:

boo_star

!!! wrote: »

I think that was the joke... :money:

Well perhaps but there appear to be at least a few people who believe that it is affecting banking apps.

jonnygee2

You're misunderstanding the story.

Biostar 2 uses fingerprints and facial recognition as part of its means of identifying people attempting to gain access to buildings.

Nothing to do with banking apps.

Hmmm, I think you've actually misunderstood. Fingerprints were leaked alongside names and personal details of their owners. People generally only have one set of fingers, so will be using the same ones to access the buildings that they use to access their banking apps.

Right now, I'm not sure the technology exists to recreate them and open up people's iPhones etc. But the technology might well exist soon (If it doesn't already) and whenever it does, the fingerprints will still be the same.

The leak therefore affects any system secured by fingerprint. Which is a big problem with biometrics.