Security researchers disclosed new work at the Chaos Communication Congress showing how hackers can bypass vein based authentication.