Hacker News Reader

the company is denying this - http://nakedsecurity.sophos.com/2012/09/06/fingerprint-scann... (link from late in the article) - but the vulnerability sounds like it could be relatively easy to check (for example, are the stored passwords the same length as the plaintext, or a typical AES block size?).

does anyone have this installed? if so, what do the data in the registry look like?

View on HN

I have a 2011 Lenovo X220 that has a reader made by UPEK, but it doesn't employ "ProtectorSuite" software. Lenovo has their own suite of management applications called ThinkVantage; one of which being "fingerprint reader" management.

I checked the registry but I'm not sure where to look. Searching for "UPEK" didn't yield anything resembling a scrambled or encrypted string in or around the search results, and "fingerprint" rendered too many results.

ah well, thanks for looking (i have one too, but it's running linux!)

edit: also, see other answer below for how to check whether it's using the software described.

Reply on news.ycombinator.com