Fingerprint reader--yea or nay?

Having recently ordered a T500 without a fingerprint reader, I've started to second-guess my decision. Money was not an issue--it's pretty inexpensive, but I became convinced that it was really more of a novelty and many people end up disabling it. However, I discovered my friend has an SL-500, and he uses the fingerprint reader all the time.

I am glad to be corrected, so I thought I would put the question here. If you have a fingerprint reader, do you find it useful? An annoyance? Did you disable yours? Would you recommend it?

Thanks,
Bill

 

I have sensitive data on my Thinkpad and I use mine all the time.
My screen saver is also set to kick in after 5 minutes of inactivity and LOCK the computer.
Having the fingerprint reader makes it easier for me not having to punch in passwords on both the boot up and resume from inactivity situations.

I think it's one of those things that even if you think you're not going to end up using much is worth having just in case as they're not that expensive.
I opted for the BT in both my current and last Thinkpad which I have not used once, but do see myself one day may getting around to use it.

It might (if anything) also help with the resale value when time comes.

 

The fingerprint reader for me is very useful and very much quicker and more swift than typing in a word password when resuming windows. I think the people that complain about fingerprint readers being unreliable and buggy tend to not know how to properly scan your finger. If you press down and keep the finger firmly over the reader, and let it do it's job, it usually works in 1 try, maximum 2 tries for me. It's also a really convenient way to log in if you have a sandwich in one hand so you don't have to put it down and type.

 

Fingerprint reader is not a safe security technology, it can be easily hacked. But it is convenient to use.

 

No it is not a safe one.. there is actually only a 99% chance that nobody will have a similar enough fingerprint to log in. Which may seem like fairly good security but is weak compared to word passwords.

 

I have it but it is very annoying, either have to swipe finger many times or message says the software is not available.

 

http://www.thinkwiki.org/wiki/Integrated_Fingerprint_Reader

Have a read.... you don't need to have same fingerprint, a photocopy of it, is sufficient.

 

Yes I use it, simple enough things to use, works well at the settings I have it on.

Just remember that although you can't forget a fingerprint, if it stops working then you will have to remember your word password or use other means.

 

Since you have already ordered the T500, I wouldnt worry trying to add a fingerprint reader now.

Personally, I just use mine for windows login purposes for which it works well.

 

I have one and have never bothered to enable it.

You cannot change your current order to add it. You would have to cancel and start over.

 

I inquired, but the order is getting ready for shipping and probably couldn't be stopped. I told the rep that canceling and re-ordering seemed more trouble than worth, especially if I had to ship the original computer back. I will continue to be fingerprint-reader-less.

Still interested in folks comments and participation in the poll. This may be of service to someone who does a thread search somewhere down the road.

Bill

 

Yeah, the fingerprint readers on laptops really are not that secure. A moderately good text password is far stronger.

Don't have one, and don't see myself using one any time soon

 

I tried getting a fingerprint reader once. I ordered it on my Dell XPS m1330 and I had a hard time using it. I always had to swipe 2 or 3 times for it to work. So when I returned the laptop to Dell and ordered my Thinkpad X200 instead, I just passed on the option

 

I have absolutely no need for it—and it takes me two seconds, tops, to type in my password. Besides, I access many other systems that require a password so I’d still be typing in passwords/I am used to typing in passwords.

 

I have one. It's only twenty bucks. Is it that useful? Not really. But the cool-factor comes in handy if you ever want to resell your ThinkPad down the road (it impresses easily).

 

I like it. Only use it to log on. It is convenient though.

 

I have similar thoughts regarding the fingerprint reader. At $20 why not...

 

I use my reader for log ins. I haven't typed the PW by choice since I got my T61p two years ago. I know its not the most secure log in, but it is quite convenient.

 

I use my fingerprint reader everytime I log onto windows. I find it very useful.

 

it seems most people just use it during logging, which is like couple of times in a day. Or like once per day for me, so from retrospect

 

When I was using my T61, I used to have the FP reader set up to get into BIOS setup too. I need to figure out how to do that again so I can with my T400.

 

I had one on my t43, but never used it after the first week, when the novelty wore off. When i got my x200, I ordered it without the fingerprint reader, and I don't regret it. At most it's a mild convenience. Not worth canceling your order for, in my opinion.

 

I have one in my T500 and also use it. Not because it is secure (well it is secure enough for me) but I like not having to type my password every time. Most of the times all I need is 1 swipe. Rarely it needs two. Most of the time the error is in the way I swipe, too fast, too to the side, etc. I got used to it during the time I had my T500, but I could certainly live without it.

I just had a little party at my house the other night, and the fingerprint reader really added to the WOW factor when people saw me login. I thought it was kind of funny But as someone pointed out above, it does seem to impress people.

 

I didn't order one with my X200, intentionally.

It should not be advertised as a "security" feature. Rather it's a convenience feature, its great for storing all your different passwords.

Of course, if it malfunctions it can be the most annoying feature ever. <- this is why I didn't order it

 

I agree--I was not going to cancel my order in order to add it. If my order could have been modified, I would have probably added it. I can see how it could be a convenience, but not a consequential convenience.

Bill

 

I am not familiar with the construction of the x200 but my fingerprint reader is in the palm rest. I have actually replaced it once under warranty due to and erratic touchpad. Maybe you could see how much it costs.

 

You have a touchpad on your X200?

 

I only use the FR to log into Windows.

An IBM on-site tech once told me that the palmrest equipped with a fingerprint reader costs like 200CAD if one ever needs a replacement...

 

I think he was saying that on his T61, the fingerprint reader is on the palmrest, while he was not sure where it is on the X200. And as an answer to that, it is also on the right palmrest - only on the X200t is the fingerprint reader on the screen bezel.

 

So, basically, security wise there is no use of FP reader, more than, it should be avoided if one is concerned about security of his laptop data?

 

A competent and aware business user also does not rely soley on one method of data protection alone, Lenovo assumes they will also encrypt the hard drive and use a word password as well. The FP reader is much more of a convenience thing.

 

Actually Lenovo don't assume anything regarding to security, these sort of security level are the stock standards in the business laptop. Most high security laptop, would use smartcard identification and power on/FDE/various passwords.

Fingerprint reader are there as a form of convenient security device, most people use it because they find it convenient and offers alright security level. For higher security purposes they are woefully inadquate.

 

I was also referring to business use... Not government use, which is one of the primary users of SmartCards

 

Short answer is, correct.

 

Actually, most high level corporation do use smartcards if they have sensitive information that can only be accessed by top tier management or people affiliated with that particular work. BP, Shell and Mobil all use them when they allow employees to the take the laptop home, and still have access to central database from offsite. While, defense companies like Raytheon, BAE, Boeing also implement them at various levels... This is also true for many mining companies, like Rio Tinto, BHP Billiton, etc.

 

oh yes i do use it, because it's so much cooler turning my t400s on with a swipe

 

I've only been using it for a week since I got my tablet but I don't think I'll ever go back. Swipe thumb = regular windows logon. Swipe index finger = admin logon. Simple. Quick. Sufficiently secure for my needs.

 

Lot of FUD in this thread.

Security is relative. In the real world, you are trying to keep out the casual/medium attacker. Anyone who is committed can get through anything.
However, some protection is sometimes all you need.

The fingerprint reader is one layer. It basically keeps people out of your machine (but if they remove your hard drive, they can see everything not encrypted). The nice thing about the fingerprint is even if someone knows your username and password, they can't get in. Now there is a lot of talk about how fingerprint devices can be fooled, but in reality, it's hard to pull off if you only have casual access to the laptop. For example, if I can get access to the machine after you are logged in, I can run a cracker against your password store, and have some success. With fingerprints, it's much harder/complex. Harder = more time = more secure (relative).

From a security perspective, it's more secure than passwords, as password can be shared (or more easily compromised). Biometrics cannot be shared (unless you cut off the finger), and are more difficult to circumvent. You can argue about this, but in the real world, biometrics trump passwords. It's sorta funny, TPM has been around for a while, and solves a lot of security problems, but it's not used as much as is should be.

Obviously, if you want to protect the data, you need to encrypt it; ex disk encryption, volume encryption, file encryption. But remember, this can be a pain in the if you need to swap out a drive drive / copy data off. If you don't have the keystore available, you are SOL. I know a guy who did BitLocker, and had a disk problem, only to find he had to wait for several days before the company could get him the keypair so he could pull his data off to another machine.

I lean toward only encrypting what I really to encrypt, in which case a TrueCrypt volume fits the bill fine.

If I have a corporate "desktop" that needs special encryption, I run it in a VM, and it's a lot easier to manage.

Anyway, I used to shun the fingerprint reader as a "nice to have", but now it's too addictive to just swipe and go for logon to windows, web sites, etc. The convenience is worth it (for me).