I have some kind of time tracking terminal here that allows users to identify themselves either through facial recognition, fingerprint or NFC. The terminal li

I have some kind of time tracking terminal here that allows users to identify themselves either through facial recognition, fingerprint or NFC. The terminal listens on telnet or ssh, is easily compromisable, and stores the last fingerprint image (the full picture, not just a hash) as well as last face picture as bmp in /tmp. You just can't rely on devices being designed such that they are secure.