Biometric Mouse

Has anyone used the following device.Is there any security drawback ?How would one fool this device ? I remember reading an article where someone used superglue fumes to create a copy of finger print.

:rolleyes: Dr_Evil

Your fingerprint is your password !


Biometrics - the identification of individuals using biological traits, such as those based on retinal or iris scanning, fingerprints, or face recognition.

This is an emerging technology that is increasingly being used for information and computer security. We also think it just happens to be pretty darn cool.

The Biometric Mouse is an optical corded mouse with USB connection and a built-in fingerprint authentication system. It conveniently enables secure computer logon, file/folder access and screensaver via biometric authentication. It can support multiple users and fast scan fingerprint imaging sensor. The biometric authentication can help to eliminate the need for multiple passwords that must be written down or memorized, thus improving the overall level of security.

http://www.thinkgeek.com/computing/i...eyboards/5f11/

Interesting... wonder how long before someone uses jello on that one to break the biometric feature. :D

Interesting concept. The thing I don't like about fingerprint authentication is that in theory it would be
pretty easy to subvert. We human beings leave our fingerprints on everything we touch; making this
just another potential security catch-up game. Also, I wonder if the cracker couldn't just walk up and
plug in their own mouse and have use of the computer. And as MsMittens suggested, I wonder how
long it would take users to do something unexpected that would undo all the magic security-fu that
a system like this is supposed to provide.

As I said though, interesting concept.

-- spurious

We took a look at these a few months ago to implement as a company wide policy.
Putting our heads together, we decided that until there was a finger print mechanism, good enough to sense heat and blood-flow, that we wouldn't invest. Like Spurious stated, we leave our fingerprints everywhere, I for one wouldn't want to be the one that gets their fingerprint hijacked off of a coffee cup, and then replicated by some means to get access into a critical system.

If you really want security, an embedded chip in your skin would probably be better, or a retinal scanner. Depends on the company though, or need of security, some people need to go to these extremes for sensitive data.

Biometrics scares the hell out of me. It's like 1984 come to life. So far all the technology is innocent, but where's the line supposed to be drawn? When does it go from "security" to "Big Brother"?? I don't want my fingerprints, retinal patterns, or anything else floating around out there. Anyone remember when Social Security first came out, and there was a huge fear of the SS number being used to catalogue us? Well look what happened. I guess I'm just being paranoid. I'm going to change directions now...

The concept is pretty cool though. It would be nice to be able to do nothing more than have my fingerprint scanned and used as authentication for electronic resources. My only quarrel with the fingerprint system, as has been mentioned already,is the fact that fingerprint ID's are too easy to forge. If there were a cost-effective way to do retinal scans for authentication purposes, it would in the end probably help make systems more secure. Security ignorant people would no longer be able to jeapordize network security by using weak passwords. Plus how do you "social engineer" someone's retina?

I think I'm going to get one of those, just to try it out. My secret porn stash will only be accessable through biometric ID. LOL. $100 is well worth it to keep my sort of girlfriend out of my stuff.

One problem, what happones if say you cut your finger and you ended up with a big scare on it...
that effectivly changeres your finger print. so then what are you ment to do??

stand there and rant at your computer [rant] ITS ME YOU FOOL LET ME IN, I CUT MY GOD DAM FINGER, NOW LET ME IN.... [/rant] ()just a clean example...()

Nightfalls_Girl

Usually, biometrics is used with another form of authentication and you can (usually) use more than one finger (have 2-3 in place). Biometrics is interesting but ladened with all sorts of problems (false positives and false negatives) that interfere with it's ability to identify. And accuracy is an issue with these devices.

disc0rd, chip idea is interesting but that too comes with it's own problems: privacy issues (Big Brother concept) and ability of the chip to be modified/copied.

No technology should be the "be-all-end-all" of security but rather simply a tool we use with other tools to achieve security.

This has been a current issue at AO comming round prolly every 6 months :p

not nessecarilly the mouse but biometric security, eg, finger scanners etc.

If you do a forum search i think you might come up with a few things, but most AOers just shoot them down as easy to break (unless you pay top quality... but why would you??) and a waste of money.. not even worth the effort :p stick to the old 40 Digit password

will my 52 digit password do...

hehe the other day my SDD teacher made up an account for me to use the computers, with in doing that he made me an admin... (silly man... :P)
any how i had to put in my password, and it was like 30 didgets long... lol
he asked me if i thought it was long enuf, my reply was no, it can never be long enuf. i then decided to errese that one and put anuther one in, just as he walked away. Just incase he saw what my old one was.
and thay say that thay keep there computers secure... yah ok 5 digit passwords are shoure to do it, just wright your daughters name backwards, that will keep them all stumped... :P
well for about .3 seconds..

Nightfalls_Girl

mm, well, i used to have a 10 digit password that consisted only of number (no repeats and no 'order' either numerical or patternal on the keyboard) but got tired of it as people kept trying to guess it.. and with my high speed typing it was too funny to watch them guess which keys i press :P

i know resided with a 14 digit password, and im not devulging wether it is alpha-numerical or biased in either :)

one flaw with my current password is that it isnt random letters, rather .. well, i cant tell you that either :P lol

LOL No comment.
this long one of mine, is a word, but then caracters and numbers are intergrated with in it, making it verry long..


Nightfalls_Girl

My concern with the biometric fingerprint authentication technology, follows the thoughts disc0rd posted earlier. Additionally though, if your password is compromised you can change it. If your fingerprints are compromised what can you change them to?

IMO the fingerprint mouse would be a valuable control in a layered authentication scheme, but not as a single point of access control.

Ms. Mittens-
A friend of mine's company, actually uses the internal chip technology. They inject it into your forearm, and then there is a scanner that reads the ID of the chip in order to even let you in the door. Talk about big brother...

But if they paid me like they're payin him...hell, INJECT AWAY!

Personially I see noting wrong with that. Pending on what you work for that is.
If you worked for say, The government than I think that thay have every wright to use that kind of technology.

Nightfalls_Girl

I don't see anything wrong with it either...Like I said, pay me enough, and I'll sport some nice breast implants for authentification LOL :)

(and you may ask yourself...what would he do for a klondike bar?)

Yet again, I also see noting wrong with chiping there imediate families, children, wives, husbands.
if you work for the government.
tho the chips would have to be untracerbal, and undetectable to every one else...
and children thay would have to be done when thay were babies.


Nightfalls_Girl

Quote:

---

Originally posted here by disc0rd
Ms. Mittens-
A friend of mine's company, actually uses the internal chip technology. They inject it into your forearm, and then there is a scanner that reads the ID of the chip in order to even let you in the door. Talk about big brother...

But if they paid me like they're payin him...hell, INJECT AWAY!

---

My security nerd days would be over. I would have to give up the biz if implants and other modifications became
a typical requirement or the norm. I can just imagine sys admins getting their fore-arm's chopped off or some such
evil yuckiness to log into a stupid server. There would be no point in the 1960's-style she-spy getting you
into bed to confess your root password (still waiting for this to happen by the way...), which is still at least a remote possibility. :)

In reply to OverdueSpy's post:

Quote:

---

if your password is compromised you can change it. If your fingerprints are compromised what can you change them to?

---

the whole point of the biometric system, is that it shouldnt be able to be compromised. ie, retina scanners etc. its designed that you and only you can posses the 'key'. however, with software passwords, they can be seen and remembered, trojans can log key strokes. there are many ways it can be compromised.

but as with most things, all it takes is time, and soon enough biometrics wont be any more secure than todays messures.

9/10 cases, an open safe is more secure than a locked safe. why? because an open safe doesnt present any challenge and ppl would assume it is empty. however a locked safe is quite the opposite!

Quote:

---

Originally posted here by spurious_inode

There would be no point in the 1960's-style she-spy getting you
into bed to confess your root password (still waiting for this to happen by the way...), which is still at least a remote possibility. :)

---

Nerds everywhere would be crushed if that fantasy were taken away.... :)

Quote:

---

Originally posted here by disc0rd
Ms. Mittens-
A friend of mine's company, actually uses the internal chip technology. They inject it into your forearm, and then there is a scanner that reads the ID of the chip in order to even let you in the door. Talk about big brother...

But if they paid me like they're payin him...hell, INJECT AWAY!

---

Just because you don't object doesn't mean that others won't. Different countries have different laws in regards to privacy (in fact, IIRC, the USA doesn't have any privacy laws -- and given the current climate would be unlikely to get it).

But what prevents someone from changing their chip id to read as someone else's? There is always that risk.

What is more important is that we realize that there is always a chance of something not working the way we'd want it to work and that someone, somewhere is bound to figure out how to get it to work in ways not envisioned. To depend on one technology to be our security saviour isn't the best of methods. Your friend probably also has visual ID by a security guard as well as passcard or other options.

Ms. Mittens-
Sure he does, I was just showing an example of the internal chip in action...Not passing any judgement as to what is secure or not. As long as there are people in the world, there will always be crooks & sheisters :)

I believe eventually... as people are born, their DNA will be put on file, and they will be implanted with locators. kinda puts a big dent in criminal activities during their lifetime dont ya think??

That may be sooner than you think High2Risk...with Bush in office here in the US, its becoming more and more like the gestapo of Nazi Germany.

Not saying that its even nearly as bad...but more like. Theres a difference between big brother monitoring, and just plain coming out and saying "We're gonna watch everything about you, and theres nothing you can do about it."

But then again, we're probably all being watched by some higher being anyway. Not tryin to turn this thread into philosophy, but its something to think about. In that case, I'd say ignorance is bliss...cuz I just don't wanna know who's watchin me, it would make me uncomfortable.

LOL, there have been so many times i watch the news with George Bush and our PM, John Howard together, and i just sit there and think.. why doesnt anyone BOMB them for christ sake, they are right there!!!

lol, if i offended anyone.. *shrugs* i have my beliefs and freedom of speech, so do you.. voice it out!

Ok, lets talk about serious security. A fingerprint scanner on a USB mouse cannot be serious security. Its a small toy gadget in my opinion, a cool one maybe, but not seriuos for a critical system. My thoughts are going in another direction when it comes to this mouse. I think its just a way to "send" the fingerprints off to somewhere. Like some big brother gag. So when you buy it, its under your name or under your SS, or whatever. So, "probably in windows" the moment you save you fingerprint, it would just send a mail or some other sort of package somewhere revealing info. I know, i know, so what if that system was not online, or antother 10 stupid reasons that its prolly not so...but im paranoid, i like being paranoid (did you know that i have never ever typed in my real name on a windows system, not ever, not even in word, or excell, or anything). I dont trust M$ products as respecting privacy. I think its just a trap device this mouse. To get info of you. Some of you might say this is ok, and needed, to track down terrorists and pedos and other stuff like that. Well, for me its not ok to have my system leak anything about its contents to anywhere for no reason whatsoever.

[/rant]

other than that, a sweet gadget to impress your neighbours ;)

Cheers.