[ltp] New Thinkpad and First Steps

[Rolf Kutz]

* Quoting Matt Graham (danceswithcrows@usa.net):

> On Wednesday 17 January 2007 12:31, after a long battle with technology, 
> Adrian Bastholm wrote:
> > On 1/17/07, James Knott <james.knott@rogers.com> wrote:
> >> Rolf Kutz wrote:
> >>> * Quoting Theodore Tso (tytso@mit.edu):
> >>>> fingerprint.  So if someone steals your laptop, they will have
> >>>> much harder time getting access to your data
> >>> Aren't your fingerprints all over the laptop or
> >>> do you use it with gloves only?
> >> BTW, what do you use to clean PGP fingerprints off your screen? ;-)
> 
> Vodka, right?
> 
> Actually, it's a bit of a pain to lift good fingerprints from surfaces 
> that people have been putting their grubby paws on in random patterns.  

https://www.ccc.de/biometrie/fingerabdruck_kopieren.xml?language=en

> It might be easier to fool a mechanical device than to fool a human lab 
> tech.  ISTR some guys did some experiments with a commercial 
> fingerprint reader and Jello somewhere, and managed to fool the reader 
> with some preparation.

Actually the new Thinkpad sensor seems to be one
of the better kind.

http://events.ccc.de/congress/2006/Fahrplan/events/1578.en.html #in German
http://events.ccc.de/congress/2006/Fahrplan/attachments/1210-congress06hacking_fingerprint_recognition_systems.pdf # PDF in English

I just wanted to point out that with accepting
either password or fingerprint you might lower
your security since you can use two attack vectors
_and_ you leave copies of one all over the place.
(Kind of that's a design problem of fingerprint
sensors)

- Rolf