3 ms·
the company is denying this - http://nakedsecurity.sophos.com/2012/09/06/fingerprint-scanner-security-warning/ http://nakedsecurity.sophos.com/2012/09/06/finger
by andrewcooke 14y ago
the company is denying this - http://nakedsecurity.sophos.com/2012/09/06/fingerprint-scanner-security-warning/ http://nakedsecurity.sophos.com/2012/09/06/fingerprint-scann... (link from late in the article) - but the vulnerability sounds like it could be relatively easy to check (for example, are the stored passwords the same length as the plaintext, or a typical AES block size?).
does anyone have this installed? if so, what do the data in the registry look like?
- deltaqueue 14y agoI have a 2011 Lenovo X220 that has a reader made by UPEK, but it doesn't employ "ProtectorSuite" software. Lenovo has their own suite of management applications called ThinkVantage; one of which being "fingerprint reader" management. I checked the registry but I'm not sure where to look. Searching for "UPEK" didn't yield anything resembling a scrambled or encrypted string in or around the search results, and "fingerprint" rendered too many results.
- andrewcooke 14y agoah well, thanks for looking (i have one too, but it's running linux!) edit: also, see other answer below for how to check whether it's using the software described.