{"id":2358,"date":"2023-01-12T05:02:16","date_gmt":"2023-01-12T13:02:16","guid":{"rendered":"https:\/\/www.ssls.com\/blog\/?p=2358"},"modified":"2023-09-27T14:08:32","modified_gmt":"2023-09-27T21:08:32","slug":"us-military-biometric-capture-device-sold-on-ebay-for-68","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/blog\/us-military-biometric-capture-device-sold-on-ebay-for-68\/","title":{"rendered":"US military biometric capture device sold on eBay for $68"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

In \u201chow the heck did that happen\u201d news, German security researchers got more than they bargained for after purchasing a biometric capture device off eBay. The device, which was created to capture fingerprints and perform iris scans, was initially listed on the e-commerce auction website eBay for $149.95. But security<\/a> researcher Matthias Marx managed to wrangle it for the lower price of $68. 
<\/p>\n\n\n\n\n\n\n\n

A bargain, especially considering what he found stored on it when it arrived in his Hamburg home \u2014 2,632 people’s names, nationalities, photographs, fingerprints, and iris scans.
<\/p>\n\n\n\n

The New York Times reviewed the database<\/a> and found that most people on the device were from Afghanistan and Iraq. While some were terrorists or known criminals, many were individuals believed to have worked with the US government or random people who had simply been stopped at checkpoints. According to metadata, the device was last used near Kandahar, Afghanistan, in the summer of 2012.
<\/p>\n\n\n\n

The device, known as the SEEK II, is a shoebox-shaped device containing tiny hardware, such as a miniature keyboard, screen, and mousepad. It features a thumbprint reader at the bottom of the device, protected<\/a> by a hinged plastic lid, while the machine unfolds to take photos and perform Iris scans.\u00a0
<\/p>\n\n\n\n

Marx and fellow researchers at a European hacker association known as the Chaos Computer Club have been purchasing biometric capture devices off eBay for the past year to analyze them for design flaws and vulnerabilities. Their interest was motivated by reports that the Taliban sized these devices once the US left Afghanistan. The group bought six devices in total, with two of the SEEK II devices containing sensitive data. The purpose of the research was to find out whether the Taliban could have gleaned information about individuals who helped the US military from these devices, consequently putting them in danger. Judging by the lack of encryption<\/a>, it\u2019s likely they did. 
<\/p>\n\n\n\n

Marx was shocked to find the information so easily available on the device, telling The New York Times, \u201cIt was disturbing that they didn\u2019t even try to protect the data. They didn\u2019t care about the risk, or they ignored the risk.\u201d
<\/p>\n\n\n\n

According to the Defense Logistics Agency, when military personnel no longer need all biometric collection gear, it\u2019s supposed to be destroyed. The agency says it should never have made it to the open market. The eBay seller, Rhino Trade, a surplus equipment company in Texas, said they bought the SEEK II at an auction of government equipment and did not realize it had sensitive information. 
<\/p>\n\n\n\n

When they complete their analysis of biometric devices, Marx and his fellow researchers plan to delete all information stored on them.
<\/p>\n","protected":false},"excerpt":{"rendered":"

In \u201chow the heck did that happen\u201d news, German security researchers got more than they bargained for after purchasing a biometric capture device off eBay. The device, which was created to capture fingerprints and perform iris scans, was initially listed on the e-commerce auction website eBay for $149.95. But security researcher Matthias Marx managed to […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2358","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/comments?post=2358"}],"version-history":[{"count":3,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2358\/revisions"}],"predecessor-version":[{"id":2685,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2358\/revisions\/2685"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/media?parent=2358"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/categories?post=2358"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/tags?post=2358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}