Almost entirely off-topic rant - apologies in advance:::

[David_Biggins@usermgmt.com]

> -----Original Message-----
> From: Brian Morrison [mailto:bdm@fenrir.org.uk]
> Sent: Monday, 22 July, 2002 09:09
> To: ukcrypto@chiark.greenend.org.uk
> Subject: Re: Almost entirely off-topic rant - apologies in advance:::
> 
> 
> Well, not to pour cold water on your theory, but in the same 
> article it
> does say that MLS state that the software does not store 
> fingerprints in
> their original form, it instead stores an encrypted version of the
> 'points' in the fingerprint 

Irrelevant.   All fingerprint systems I've worked with work in this same
way.

> so that reconstructing the fingerprint is
> supposed to be fairly hard. 

When they want to compare a crime-scene fingerprint with their
immorrally-obtained one-way stores,  they simply apply the same one-way
conversion to it first,  and compare that with the one-way converted
stored fingerprints.

In no way does this lessen the scope for official misuse of this data.

> I can't say that I know what the 
> encryption
> used is, nor how the fingerprint is distilled into recognition points,
> but this is a little different from the gist of your posting.

No, it isn't.

The gist of my posting is that this data collection is open to official
misuse.

You haven't demonstrated that it is not.

## dave ##