The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Security flaw in Studio's DigitalPersona Fingerprint Software

    Discussion in 'Dell' started by Mayhew132, Jan 16, 2009.

  1. Mayhew132

    Mayhew132 Notebook Enthusiast

    Reputations:
    0
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    5
    Hi there,

    There is currently a major security flaw in the DigitalPersona software used by the Studio's fingerprint reader, whereby a user can launch Internet Explorer (or the default browser) without logging on to the system.

    If you have the software installed now, go ahead and give it a try. Either log off, or lock the system and then click "Swipe you finger to unlock" account, and then "Enroll Fingerprints".
    Finally right click on the animation in the wizard and select "About Adobe Flash Player", launching Microsoft Internet Explorer.

    I suggest that if anyone knows a way of reporting this to the software creators that they should do so.

    Thanks
    Guy
     
    Mayhew132, Jan 16, 2009
    #1
  2. stik

    stik Newbie

    Reputations:
    0
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    5
    The other more serious security flaw that I can see is that the entire security is based on your windows login password. This password can easily be reset or changed by anyone using any of the freely availiable password resetters. This will enable anyone to login to the utility software and have free access to all your confidential files and passwords.
     
    stik, Jan 27, 2009
    #2
  3. aidil

    aidil Notebook Evangelist

    Reputations:
    311
    Messages:
    490
    Likes Received:
    0
    Trophy Points:
    30
    There is a security update dated 2009-01-27 fixing this issue. Just check it using DigitalPersona Software Manager.
     
    aidil, Jan 29, 2009
    #3
  4. stik

    stik Newbie

    Reputations:
    0
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    5
    Unfortunately this does not address the more serious issue above.
     
    stik, Jan 29, 2009
    #4