Unlocking Any Door In 21st Century. Immersion In Bio-Security
summary
Three commercial biometric devices are reverse engineered: airport-grade terminal, an infrared-only time clock, and a consumer AI doorbell. Firmware extraction yields remote code execution, MD5-signed updates and an unlocked USB OTG console; AWS upload uses a path‑traversal flaw exposing snapshots. A variational autoencoder trained on CelebA plus SparNet super‑resolution generates a universal face that scores above the device threshold 2500 in silico, but real‑world printing fails; bypasses include placing glass between depth and visible cameras and using infrared‑lit transparent film.
AI-written summary · about
chapters (7)
- 0:00Speaker and Talk Introduction
- 3:07Current State of AI/ML in Biometrics
- 7:41ML attacks landscape
- 10:13Attacking devices
- 23:37Conclusion
- 31:04Security Checklist
- 31:51Q&A
related talks
01h 06mBackdoors in Back Doors
37mOpen Sesame! The full story behind opening a smart lock
40mBiohacking: The Invisible Threat
25mBiometric Authentication Under Threat: Liveness Detection Hacking
16mReverse Engineering the Eufy Ecosystem: A Deep Dive into Security Vulnerabilities...
44mBreaking the Security of Physical Devices
01h 00mBiometric Unsecurity
37mThe Living Dead: Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks