Laptop fingerprint reader destroys 'entire security model of Windows accounts'

Re:Laptop fingerprint reader destroys 'entire security model... by andrewcooke on Thursday September 06, 2012 @06:34PM (#4486642)

the company is denying this - http://nakedsecurity.sophos.com/2012/09/06/fingerprint-scann... (link from late in the article) - but the vulnerability sounds like it could be relatively easy to check (for example, are the stored passwords the same length as the plaintext, or a typical AES block size?).

does anyone have this installed? if so, what do the data in the registry look like?

[ Parent | on HN ]

Re:Laptop fingerprint reader destroys 'entire security model... by deltaqueue on Thursday September 06, 2012 @07:03PM (#4486768)

I have a 2011 Lenovo X220 that has a reader made by UPEK, but it doesn't employ "ProtectorSuite" software. Lenovo has their own suite of management applications called ThinkVantage; one of which being "fingerprint reader" management.

I checked the registry but I'm not sure where to look. Searching for "UPEK" didn't yield anything resembling a scrambled or encrypted string in or around the search results, and "fingerprint" rendered too many results.

[ Parent | on HN ]

Re:Laptop fingerprint reader destroys 'entire security model... by andrewcooke on Thursday September 06, 2012 @07:15PM (#4486810)

ah well, thanks for looking (i have one too, but it's running linux!)

edit: also, see other answer below for how to check whether it's using the software described.

[ Parent | on HN ]