Let's make huge databases of fingerprints or maybe not?

Karim Vaes, posted an interesting blogpost about Biometrics. Biometrics are not bad, just using fingerprints can be a problem. Because you leave them behind everywhere.

And his timing of the post seems to be so bitter sweet on the spot. A few hours later, news of the CCC (Chaos Computer Club) publishing the fingerprint of the German Home Minister started circulating as a protest against biometric data. From the Identity and Privacy blog:

I think it’s a stark reminder that some biometrics- such as a person’s fingerprints- are reasonably easy to get. And, once compromised, the person can’t ring up a help desk and get a new one (like they can passwords).

The current story revolves around Germany’s interior minister, Wolfgang Schauble. He is apparently quite vocal about collecting and using biometrics to fight terrorism, including storing them in ePassports.

In the most recent issue of Die Datenschleuder, activists under the name of Chaos Computer Club (”Europe’s largest hacker group”) printed the image of, what they claim, is the fingerprint of his index finger.

The fingerprint, on a plastic foil that leaves fingerprints when it is pressed against biometric readers, is included in the 4,000 copies of the latest issue of the magazine. Schauble’s fingerprint was said to be captured off a water glass he used last summer while participating in a public discussion at a University in Berlin.

If a person’s fingerprints are “in the wild” then they are a far less reliable way to authenticate the person for his/her whole life. If enough fingerprints are similarly widely available- whether by accident or deliberately- it will be enough to make fingerprinting almost useless.

Related posts:

• Dutch government wants fingerprints of every dutchman in national database
• Busting physical security
• Mythbusters vs Biometrics
• Belgian ePassports are flawed