Tuesday, March 07, 2006

Differently Abled Encryption?

Granted, it's a mere bump in the road to consumer acceptance of fingerprint-based authentication, but this is hardly Microsoft's finest moment.

From Engadget:

If you've got a Microsoft Fingerprint Reader hooked up to your PC and thought you had the latest and greatest in biometric security, you're out of luck. A Finnish researcher has discovered that the reader -- which Microsoft has said shouldn't be used to protect sensitive data (meaning, we assume, you should just use it to check out those wild whorls) -- sends fingerprint info to the PC unencrypted, which could enable anyone with the right tools to snag your fingerprint image, and use it to log into your PC. Strangely, Microsoft licenses the technology from another company, Digital Persona, which does encrypt fingerprint data. For some reason, however, Microsoft chose to disable encryption in its product, making it less secure than the passwords it purports to replace.
This is less secure than the passwords for another reason, as well: If consumers trust that an authentication product is secure, they may tend to relax about other security measures.

At the other end of the security spectrum, here's a laptop for somebody "who lives in a really bad neighborhood":

NEC introduced its Generation laptop for the education market, but it looks like it’s aimed at somebody who lives in a really bad neighborhood. It’s loaded with security measures that are so extensive they border on paranoia. First, the notebook is password-protected and login is done with via a hardware fingerprint security chip, great for schoolkids because they won’t have to remember a password. There’s an NEC security control panel, which allows administrators to disable USB or optical drives, keeping that unauthorized software out of the picture. Is also has a Kensington lock slot, a Stoptrack anti-theft label and Webtrack geographical tracking software. Of course, the thing is loaded with antivirus protection and to top it all off, it’s covered by three years of antitheft insurance. Just reading this feature list make you wonder exactly what awful thing happened to this notebook’s designer. Pricing starts at $1138.
Maybe the State Department should price a few, too.