On Sun, 02 Dec 2007 06:16:33 +0900 John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote: > Konstantin Svist wrote: > > > See here how Mythbusters opened a "strong" fingerprint-only lock with a > > photocopied fingerprint: > > http://www.engadget.com/2006/09/22/digital-fingerprint-door-lock-defeated-by-photocopied-print/ > > They still need the fingerprint. In the (common) case of a stolen > laptop, possession of the computer doesn't necessarily lead to > possession of the key print. Odds on the shiny surfaces of the laptop will contain the fingerprint. I can also probably obtain all the data by moving the disk over or by isolating the reader by flashing a patched BIOS. At minimum you would need a system where the fingerprint reader was linked to disk encryption. At that point it serves no purpose as you might as well keep the key somewhere safe and different (or use a smartcard). Alan
