{"id":52347,"date":"2016-08-29T10:38:28","date_gmt":"2016-08-29T17:38:28","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=52347"},"modified":"2025-07-28T23:23:14","modified_gmt":"2025-07-29T06:23:14","slug":"como-la-realidad-virtual-ayudaron-a-los-investigadores-a-hackear-la-seguridad-biometrica","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/es-es\/mobile-security\/como-la-realidad-virtual-ayudaron-a-los-investigadores-a-hackear-la-seguridad-biometrica\/","title":{"rendered":"C\u00f3mo la realidad virtual ayudaron a los investigadores a hackear la Seguridad Biom\u00e9trica"},"content":{"rendered":"

Years ago, holograms were considered the stuff of science fiction. Things have changed. In recent times, we’ve gone from seeing our beloved, deceased cultural icons appear on stages <\/span><\/span>at music award<\/span><\/span><\/a> shows to CEOs attending large meetings <\/span><\/span>as holograms<\/span><\/span><\/a> . Obviously, our ability to protect ourselves through virtual reality around the world has evolved. But the security implications of this have evolved as well.<\/span><\/span><\/p>\n

Those consequences came to light earlier this month at the Usenix security conference, an annual security symposium designed to highlight the cybersecurity issues of new technology. During this year’s conference, researchers from the University of North Carolina demonstrated how <\/span><\/span>lifelike facial animations<\/span><\/span><\/a> could be used to fool facial recognition.<\/span><\/span><\/p>\n

To accomplish this, WIRED reports, the researchers used virtual reality-like technology and a few photographs borrowed from volunteers. (Although the volunteers freely gave the researchers permission, the photographs were obtained in a similar way to how cybercriminals would obtain them, according to WIRED.) This technique bypassed several tested security systems.<\/span><\/span><\/p>\n

When it comes to technology, this isn’t unexpected. New technologies will almost always have vulnerabilities and obstacles during their inception. As always, security researchers are best equipped to uncover the security flaws embedded in these technologies.<\/span><\/span><\/p>\n

In <\/span><\/span>this particular case<\/span><\/span><\/a> , the researchers used the stolen virtual photographs to create fake faces using readily available 3D rendering and animation software. They then combined the photographs and animated the 3D images to fool facial recognition programs into thinking the fake images had movement and depth (even making them blink and smile)\u2014measures these programs use to verify when scanning a face.<\/span><\/span><\/p>\n

It’s a great reminder that it’s trivial to steal high-quality photographs of someone today. Even from multiple angles, which is what a theoretical attack requires. Criminals could simply <\/span><\/span>browse their Facebook<\/span><\/span><\/a> , LinkedIn, and other social media profiles. And while this vulnerability is easy to exploit, it’s also a bit tricky to defend against. After all, having an online presence is important for social and career purposes, and even the most careful people when posting can’t always guarantee they won’t leave digital footprints.<\/span><\/span><\/p>\n

Alarming? Sure. But it’s not so worrying: the attack is too complicated and time-consuming for cybercriminals to bother carrying out. It takes a lot of preparation\u2014and in-depth knowledge\u2014to successfully replicate this theoretical attack. This fact significantly reduces the number of people who could be at risk. Furthermore, these vulnerabilities have been emphasized to cybersecurity firms\u2014firms that want this technology to succeed. Fixes for these problems will be available soon.<\/span><\/span><\/p>\n

Given this research, we’ll take the opportunity to review two issues that are relevant in today’s digital world. First, as discussed above, maintaining a level of online privacy is important not only as a lifestyle choice but also for security. Our photos are now connected to our profiles, and consequently, to our security. Second, technology isn’t a static thing. There are new innovations every day in devices and services, and security takes time to perfect. Biometric security and similar innovations are no different.<\/span><\/span><\/p>\n

Consejos para practicar la seguridad biom\u00e9trica<\/h2>\n

With that in mind, I present three tips for practicing biometric security:<\/span><\/span><\/p>\n