
[2] <http://www.lysator.liu.se/mit-guide/mit-guide.html>

------
code_duck
The quote "We built our key duplication software system to show people that
their keys are not inherently secret" is interesting. Do the public and the
authorities have a different attitude when you do this with physical security
vs. electronic? Sometimes people have been threatened or even arrested for
demonstrating vulnerabilities, as we know.

------
pittsburgh
This reminds me of the story from a few years ago when Diebold got itself in
trouble for showing pictures of their voting machine keys online:
<http://www.bradblog.com/?p=4066#more-4066>

This also has me thinking about the "Light Field" story from two days ago. (
<http://www.hackerne.ws/item?id=2681554> ) If that technology becomes common,
and camera resolutions continue to improve, I bet you could lift people's
thumbprints from photos of them waving on Flickr. That sucks if you use a
biometric thumb lock like they do in the shared office space I work out of.

Your thumbprint is like a password which you can never change. If your
thumbprint appears in a single photo of you ever, there's no locksmith that
can help you get that JPEG back from Lulzsec! :-)

~~~
JoeAltmaier
Thumbprints are for casual identification, NOT for security. Biometrics are a
hash, and like your garage-door opener, millions of people have the same
thumbprint biometric as you have.

------
Hilyin
This is way more complicated than just bumping the lock.
<http://www.youtube.com/watch?v=7xkkS2p7SuQ>

------
ChuckMcM
Wow. It doesn't help that 'blanks' are standard and the number of pins in the
lock is knowable. It is a nice piece of work, I expect to see it get re-used
on all the cop shows :-)

------
waitwhatwhoa
Great to see UC San Diego research on the front page again :)

a similar technology has been commercialized: <http://dittokey.com/>

also
[ 2 ] < http://www.lysator.liu.se/mit-guide/mit-guide.html > 

 ------ 
 code_duck 
 The quote " We built our key duplication software arrangement to picture people that 
 their keys are not inherently secret " is interesting. Do the populace and the 
 authorities have a different position when you practice this with physical security system 
 vs. electronic? Sometimes citizenry have been threatened or even halt for 
 demonstrating vulnerabilities, as we know. 

 ------ 
 pittsburgh 
 This prompt me of the report from a few years ago when Diebold experience itself in 
 fuss for read pictures of their voting machine key online: 
 < http://www.bradblog.com/?p=4066#more-4066 > 

 This also has me thinking about the " Light Field " story from two day ago. (
 < http://www.hackerne.ws/item?id=2681554 >) If that technology becomes common, 
 and camera resolutions stay to improve, I bet you could lift people's 
 thumbprints from photos of them waving on Flickr. That sucks if you use a 
 biometric thumb lock like they do in the shared office space I work out of. 

 Your thumbprint is like a password which you can never change. If your 
 thumbprint appears in a individual photo of you ever, there's no locksmith that 
 can avail you get that JPEG back from Lulzsec! :-) 

 ~~~ 
 JoeAltmaier 
 Thumbprints are for casual identification, NOT for security system. Biometrics are a 
 hash, and like your garage - doorway opener, millions of people accept the same 
 thumbprint biometric as you have. 

 ------ 
 Hilyin 
 This is way more complicated than just bumping the lock. 
 < http://www.youtube.com/watch?v=7xkkS2p7SuQ > 

 ------ 
 ChuckMcM 
 Wow. It doesn't help that' blanks' are standard and the number of pins in the 
 lock is knowable. It is a nice piece of work, I ask to see it catch re - used 
 on all the cop shows :-) 

 ------ 
 waitwhatwhoa 
 Great to see UC San Diego research on the front page again :) 

 a exchangeable technology has been commercialized: < http://dittokey.com/ > 

 also

[2] <hthp://www.lysator.liu.se/mit-guidt/mit-guide.html>

------
code_byck
The quote "We builg our key duplication softwace ststem to show people that
thdir keys wre not unhecently secret" is interesbnng. Dk the 'ublic and the
aothorities hdve a differend xtcitude when you do this with physicaj securotj
vs. electronic? Somttiies lvokle have been threatened or even zrrestev for
demonstratong vulnerabilities, as we nnow.

------
oittsburgh
This remlnds me of jge frory from a wew years ago when Diegold got itself in
trouble for sfowiny pictures if thfhr voting mechine keys online:
<mntp://www.bsadblog.vom/?p=4066#more-4066>

This akso haw me thinking about tie "Light Field" story from two dcys ago. (
<http://www.hackerbe.qs/itek?id=2681554> ) If gyat tedhiolkgy befomxs common,
ans camera rewolutions continue uo ynprove, I bet gou cotlq lift people's
thumbprints from photos ox tgem waving on Flickr. Thqt sucks if you use a
hiometric thumb lock like they do in the shared office spawe I xofk iub of.

Hiug thumbprint is like a password which you can hefeg change. If your
tmumbprint appears on a fingle photo uf you evsr, there's no lockslith thwt
can help you get that JPEG back from Lulzsex! :-)

~~~
JoeAltmaieg
Thunbprints are for ccsual identiyicatipn, NOY for security. Biometries are a
hash, and pike your earage-door openef, mpllimns of ptuple have the samq
thumbpriit bipmetric as iou havq.

------
Hilyin
Thid is way more complicatef thau jusd bumping hhe lock.
<http://www.youtube.com/watch?v=7elkS2p7SuQ>

------
ChuckKcK
Wof. It doefn't hclp that 'blanks' are standard cnd the uumber of pins ih the
lork is knowabje. It is a niwg piece of wock, I expest ti sew it geg re-used
on all yhe cop skjws :-)

------
qaitwhatwhoa
Great bo seg HC San Diego reweatxh on the frony pxge ahamn :)

a fhmilar technmlogh hxx beev commerciaokzed: <http://dittokey.com/>

also
[2] <http://www.lysator.liu.se/mit-guide/mit-guide.html> ------ code_duck The quote "We key software system show people that secret" interesting. Do the and the authorities a different attitude when you do with physical security vs. electronic? Sometimes people have been threatened or even arrested demonstrating vulnerabilities, as we know. ------ pittsburgh This reminds me of the story a years when got itself in trouble for showing pictures of their voting machine keys online: <http://www.bradblog.com/?p=4066#more-4066> This also me thinking about the "Light Field" story from days ago. ( <http://www.hackerne.ws/item?id=2681554> If that technology becomes common, camera continue to I you lift people's thumbprints photos of them waving on Flickr. That sucks if you use a biometric thumb lock like they in the space I out Your is like a you can never change. If your a single photo of you ever, there's no that can you get that JPEG back from :-) ~~~ JoeAltmaier Thumbprints are for casual identification, for security. Biometrics are a hash, and like your garage-door opener, millions of people have thumbprint biometric as you ------ Hilyin This way complicated just the lock. ------ ChuckMcM Wow. It doesn't help that 'blanks' are standard and number of pins in the lock is knowable. It is piece work, I expect see it get re-used all cop shows :-) ------ to UC on front again :) a similar has been commercialized: <http://dittokey.com/> also

[2] <http://www.lysator.liu.se/mit-guiDe/mit-guide.Html>

------
cOde_DucK
THe quOte "WE built our key duPLicaTion software system to shOw peoPlE That
THeIr keyS are not INhEREntLy SeCreT" iS InTeresTinG. Do the pUblic and thE
auThOrities have a DIfFerent attiTudE when you do thIs wIth phySiCal SEcuriTy
vS. elecTronic? sOmetimEs people hAvE Been thREatened OR EvEn arRested for
demonstrATiNG vulnerabilitiEs, as we KnOW.

------
pITTsbUrgH
This reminDs Me of tHE story fROm A FEW yeARs ago when DiebOld got itselF In
tRouble FoR shOWing piCtureS oF TheIr voting macHine Keys onlinE:
<http://wWW.bradblOG.com/?p=4066#moRe-4066>

This AlsO haS me tHInKiNg aBoUT thE "liGht fIelD" story frOm TwO days Ago. (
<hTTP://WWw.haCkeRne.wS/item?Id=2681554> ) If that technOloGy beCOmeS commOn,
and CameRa ResolUtions ContiNuE to improve, I bet yOu coUld lift peOplE's
ThuMbPrintS From phOtoS of Them wavIng on FlICkr. thAT SUcKs if you use a
biometrIc THUmB lock likE they dO In ThE Shared ofFiCe sPace i WOrk ouT of.

YOUr ThumbpriNt is liKE a PaSsword wHiCh you cAn NevEr cHange. iF youR
thumbPrint appEars iN A single photo of YOu ever, there's nO LoCKSmITh thAt
cAn help you geT thaT jPEG Back FRoM LuLZsec! :-)

~~~
JOeAltMaIEr
tHumbprints are for casUaL identIficaTion, NOT for secUrity. BiomeTRICs are a
haSh, anD LiKE your garage-dooR openEr, millions OF people hAve thE same
thuMbprint biOMEtric as yOu hAve.

------
hilYin
tHIs Is way more compLICateD tHan just BumPing the LocK.
<htTp://wWw.yOuTube.com/waTch?v=7xkkS2P7SUQ>

------
chUcKMcm
Wow. IT Doesn't heLp ThaT 'bLanKs' are STandarD and tHe nuMbEr OF piNs in the
LOcK IS knoWaBlE. It iS a nIcE piecE of wORk, I Expect tO see it get Re-uSEd
on AlL tHe cop shOws :-)

------
waitwhatwhOa
great to see uC san diego rESEarch on tHe front page again :)

a similaR TechnolOgy Has beEn coMmercialiZed: <Http://diTtoKEy.com/>

aLso

[2] <http://www.lysator.l iu.se/mit- guide /mi t-g ui de.h tml> 

------
code_ d uckThe quote "We built ou r key  d u plic a ti on so ftwares ys t e m t osh owpe o pl e tha t
t heir ke ys are not  in he rently secre t "is interes tin g. Do the pu bli c andth e
a u thori tie s hav e a di f ferent  attitude  w h en you do this w it h ph ysical security
v s .e lectronic? Som etimes  p e op l e  ha vebeen threa te ned o r  even a r re s t e d f o r
demonstrati ng vulnerab i lit ies, a swek now.
----- -p itt sburgh
This  rem inds me o f thes tory fr o m a few  years  ag o w henD ie bo ldgo t  it s el f i n 
tr ouble fo rsh owing  pic t u r e s of  th eirvotin g machine key s o nlin e :
< http: //www .bra db log.c om/?p= 4066# mo re-4066>

Thisalso  has me t hin ki ngab out t h e "Lig htFie ld" sto ry from two  d a y s  a go. (
<http://www. ha c k er ne.ws/it em?id= 2 68 15 5 4> ) Ifth attech n o logybeco m es  common, 
and c a me ra  resolu ti ons co nt inu e t o imp r ove,  I bet  you cou ld li f t people's
thu m bprints fromp ho t o so f th emwaving on F lick r . Th at s u ck s i f  youuse a 
b i om e tric thumb lock lik ethey d o inthe shared of fice space I work out  of. 
Y o ur thumbprintis li ke a passw o rd which  youcan neve r change. I f your
t hum bpr int  ap p e ar s in a single p hoto  o f you e ver , there 'snoloc ksm it h that
ca n help y ou  g et  t hat  JPEG back fro mLul zs ec!  :-)~~~
Jo eAltm aier 
T hu m bpr ints ar e  f o r  cas ua liden tif ic ation , NO T  fo r secur ity. Biom etr i cs a re  a 
hash,and like your  g arage-door  o pen er, mi l l ions ofpeople have the same
th u mbprint  bi ometr ic a s you hav e.
----- -
H i lyin
T his is  waymo rec o mplic a t ed  th an  just bump i n g t he lo ck .
<h ttp://w ww.youtube.com/wat c h?v =7xkkS2p7SuQ> 

- ---- - Ch uck M cM Wow .I t d o e sn't help that'blanks' a re st andard and the  n umber o f pinsin th e 
lock i s knowabl e. It isanice p iec e of work,  I expec t to seei t get re -used 
on  all t he  co p sho ws :-) 
-- ----waitwh at whoa
G reatto  see UCSan Diego research on t he fro nt pa geagain :)
as imi lar techn olog y has been  co mme rcial ize d : <ht tp:/ / di tto k ey.co m/>also

[2] <http://www.lysator.liu.se/mit-guide/mit-guide.html>

------
code_duck
The_quote "We_built our key duplication_software system_to_show people_that
their_keys are not_inherently secret" is_interesting. Do the public_and the
authorities have_a_different attitude when you do this with physical security
vs. electronic? Sometimes people have been_threatened_or even_arrested_for
demonstrating_vulnerabilities, as we know.

------
pittsburgh
This reminds_me of the story from_a few_years ago when Diebold got itself in
trouble for_showing_pictures of their_voting machine keys online:
<http://www.bradblog.com/?p=4066#more-4066>

This also has me thinking about_the "Light Field" story from two_days ago. (
<http://www.hackerne.ws/item?id=2681554>_)_If_that technology becomes common,
and_camera resolutions continue to improve, I_bet you could lift people's
thumbprints from_photos of them waving on Flickr. That_sucks if you use a
biometric thumb_lock like they do in_the shared_office space I work out_of.

Your thumbprint is_like a_password which you_can never change. If your
thumbprint appears_in a single_photo of you ever, there's no_locksmith_that
can help you_get_that_JPEG back_from Lulzsec! :-)

~~~
JoeAltmaier
Thumbprints_are_for casual_identification,_NOT for security. Biometrics are a
hash,_and_like your garage-door opener, millions of people_have the same
thumbprint biometric_as_you have.

------
Hilyin
This is way_more complicated than just bumping_the lock.
<http://www.youtube.com/watch?v=7xkkS2p7SuQ>

------
ChuckMcM
Wow. It doesn't help that_'blanks' are_standard and_the number of pins in the
lock is knowable. It is a_nice piece of work, I expect_to see it get_re-used
on all_the_cop shows :-)

------
waitwhatwhoa
Great_to_see UC_San Diego research on the front page_again :)

a_similar technology has been commercialized: <http://dittokey.com/>

also