Microsoft Fingerprint Reader Cleartext Credential Transmission

2006-03-06T20:46:28
ID OSVDB:24318
Type osvdb
Reporter OSVDB
Modified 2006-03-06T20:46:28

Description

Technical Description

While the fingerprint information is transmitted without encryption, it occurs between the fingerprint reader device and the local computer. The avenue for compromising and sniffing the traffic are very limited.

References:

Other Advisory URL: http://www.blackhat.com/presentations/bh-europe-06/bh-eu-06-Kiviharju/bh-eu-06-kiviarju.pdf News Article: http://www.infoworld.com/article/06/03/06/76157_HNfingerhack_1.html