Discussion in 'OT Technology' started by michelin man, Apr 19, 2007.
do you use one / have you used one
I like the ones built into Thinkpads.
need one for the office
My lappy has one - I like it. I can activate programs/websites with each finger, log into the entire computer on boot up and it logs me right into windows, remembers passwords. It's nice.
How secure is something like that? I mean hacking-wise.
If the program itself gets hacked, does it give them wide open access to the pc?
i have a thinkpad with a built in one. it's nice, but i don't think you can use it for anything but logging into windows
you can use it for other things.
Not as secure as you would think. Most can be fooled without too much trouble.
saw a mythbusters episode where they were able to lift prints off a table with a traditional fingerprint kit, printed it out and were able to fool the fingerprint reader.
you can lift prints off of flat surfaces. i've seen this demonstrated with gummy bears, it was amazing
I used to have the Microsoft fingerprint reader. I was cool to use to login to my PC and login to websites and programs, but by no means is it secure.
The better fingerprint readers come with software that generates a highly-secure password for your Windows user account and links it to your fingerprint automatically. If you can somehow hack the software into surrendering that password, or at least supplying it to the Windows login screen for you, then I guess you've broken the system, but I suspect it would be a bit hard to accomplish that without already being logged into the system -- and no security system can compensate for a user who forgets to log out when they walk away from their computer.
Exactly. If you have enough access to the system to tamper with the software (which is usually a GINA replacement) then you already have more then enough access to the system to do anything you want and really wouldn't need to compromise the fingerprint software in the first place.
Windows is easier to hack than the fingerprint reader - unless you saw off their hand Bauer style.
I like the Gummi Bears idea better.
Well it took quite a bit for Mythbusters to use lifted fingerprints - I think chopping someone's hand off is easier.
i just need one for the office because there are way too many passwords to remember or keep track of.
You can use it for a lot of stuff.
have on built into my toshiba laptop
Hell yeah. I hate having to change my password every month. If I could just have a piece of software update my login info and link it to my index finger, I wouldn't mind if it changed every 15 minutes.
just save all your passwords in your browser and make sure you log off windows everytime you're done
We use Citrix Password Manager Agent. Very effective. Works for web, windows, and 3270/as400 terminals.
Doesn't that just replace a bunch of passwords a single password? I'd rather not have to remember any passwords; it's easier to remember to bring my fingerprints to work.
no. We have our AD password that you need to initially log in... However, I'm looking at getting RFID to use for logins (already use RFID for points-of-entry). Once you're logged in, Citrix PMA provides all passwords without any other interaction.
RFID would definitely reduce the "fingerprint" cloning problem.
It's also faster than constantly using your finger.
Over this summer I'm looking to get RFID implants to do this in particular.