The ability to create a substitute finger shows why even biometric controls need to be supplemented by other lines of defense.