Hackers Can't Easily Steal Fingerprints from Social Media Photos, Experts Say

For years, users have been worried about sharing information online. But a new concern has emerged among social media users recently. Can hackers steal biometric information from a photo uploaded on social media?

According to a CBS News report, social media posts claiming that a hacker can steal fingerprints from online photos flashing peace signs have garnered thousands of likes, creating panic among users. However, experts have a different view. While acknowledging that it is possible to extract fingerprints from online selfies, the risk for most people remains low and less concerning than existing cyber threats like phishing scams and data breaches.

How did peace sign selfie scare begin

As mentioned above, it all started when users started sharing social media posts referencing an April segment on a Chinese television show. A segment on the show featured an expert demonstrating how fingerprints visible in a peace sign selfie taken close to the camera could potentially be extracted and enhanced digitally. The clips quickly spread online, with some users warning that AI could make the process easier. “Just end AI already!,” wrote one Instagram user as cited in the report. “It's clearly a threat to humanity and not here to help regular people." Another user said they may have to change how they take selfies.

What experts say about the risk of fingerprint extraction from peace sign selfie

Cybersecurity experts say while the scenario is possible, its imminent threat is minimal. "You have a better chance of being hit by a car tomorrow than this happening to you in your lifetime," said Justin Cappos, a New York University professor and cybersecurity expert as cited in the CBS report. "This sounds like the stuff out of spy novels or 'Mission Impossible,'" said Vyas Sekar, an electrical and computer engineering professor at Carnegie Mellon University. "In theory, it's possible, especially if people are posting high-resolution images."

Real world examples

There have been real-life incidents of extracting fingerprint from online photos. In 2014, a hacker claimed to have cloned the fingerprint of then-German Defence Minister Ursula von der Leyen using close-up photographs taken at a public event. In the same year, researchers at the cryptocurrency exchange, Kraken, were able to construct a fingerprint from a photo of one marked on a surface with the assistance of Photoshop, a printer and glue.

Should you be worried

Not necessarily, for now. As stated in the report, even if a hacker were to obtain your fingerprint, to do anything with it, they would need access to the physical scanner your fingerprint unlocks — like on a laptop or a thumbprint pad at a bank. Sekar told the publication that a criminal would need to be "fairly determined" and would likely focus on a "high-value target" whose fingerprint could unlock something particularly valuable. For average social media users, experts say there are far easier ways for cybercriminals to steal information. "I don't think cyber criminals have started to try to weaponize it at any scale," Cappos said of extracting fingerprints. "Ten years from now, who knows if the landscape has shifted and cyber criminals are using this as an attack vector or something. But definitely, where we are today, this is not going to happen."