Showing posts with label Per Thorsheim. Show all posts
Showing posts with label Per Thorsheim. Show all posts

Thursday, 30 July 2015

Chrome Extension Prevents Profiling By Type Of Behavior



Websites, Internet users nowadays not only to follow based on their IP address or browser features, including the way one type provides companies with sufficient information to draw up a profile. Two researchers, Paul Moore and Per Thorsheim therefore have developed an extension for Google Chrome called " Keyboard Privacy "that prevents profiling by type of behavior.

Several banks were already using the technology. The technology according to the researchers, also interesting for totalitarian regimes, as well as advertisers. Even when using an Internet user or a Tor proxy, he would still be recognized by the use of his type of behavior. In order to counter this form of tracking and profiling Keyboard Privacy changes the rate at which typed characters arriving at the website.

Moore argues that the extension reduces security, but this is not a bad thing necessarily. "It's important to find a good balance between security and privacy. It is very difficult to raise one without the other measurable decrease," he notes.Internet users who like their type of behavior on websites "leak" or their bank will be forced to, according to Moore extension per website on or off. Soon there will appear a Firefox version of the extension.

Friday, 6 March 2015

Hacker Circumvents Iris Scanner With Pictures From Google Images


A well-known German hacker who has already a fingerprint of German Chancellor Angela Merkel was able to get will this month at the CanSecWest security conference show how with pictures from Google Images can circumvent an iris scanner. Jan Krissler, aka "Starbug" knew in 2013 even though TouchID to beat Apple. Now the German researcher focused on the Panasonic BM-ET200 authenticam.

The product is no longer sold, but is still in use in many places. To deceive the system, the pictures have to meet several conditions. For example, the eyes should be bright because of the way it uses infrared light-based system. The image should be large and clear enough, so let Krissler opposite Forbes know. Something that the investigator is no obstacle. "We managed to deceive a commercial system with a print of an iris diameter of 75 pixels."

Furthermore, the print should have a resolution of 1200 dpi. Google Images and other places to find pictures of irises in high resolutions. Krissler example was an election poster of Merkel with an iris diameter of 175 pixels. According authentication expert Per Thorsheim iris scanners are currently a "nice gimmick", but not yet ready for the general public. Nevertheless demonstrated various parties, such as ZTE and Fujitsu , this week at the Mobile World Congress oogverificatie- and iris authentication systems.