There are protocols that you can use to authenticate the fingerprint scanner [1]. When they are not used you can indeed just shim a fake scanner and unlock the

There are protocols that you can use to authenticate the fingerprint scanner [1]. When they are not used you can indeed just shim a fake scanner and unlock the PC [2]. This all assumes that nobody can break into the secure silicone of the the fingerprint scanner (or the PC) of course, but that is a pretty high bar. [1] https://github.com/microsoft/SecureDeviceConnectionProtocol https://github.com/microsoft/SecureDeviceConnectionProtocol [2] https://www.theverge.com/2023/11/22/23972220/microsoft-windows-hello-fingerprint-authentication-bypass-security-vulnerability https://www.theverge.com/2023/11/22/23972220/microsoft-windo...