Fingerprint scanner questions

I just ordered a HP Pavilion dv2700t laptop which comes with a fingerprint scanner. I understand that it is insecure, so I was wondering if I can setup GDM and PAM to let me swipe my finger instead of the username? This should make my computer more secure (or at least not any less secure), put that fingerprint scanner to use, and maybe even increase login speed. How hard will it be? I'm sure I _could_ do it, but I don't want to have to do any programing. I don't know how to program and if I tried to piece together a function from tutorials I'm sure it would come out buggy.

[Prometheum]

I have a dv9500, and it has a scanner that I got working mostly with stuff from the repo and a few other things that I had to build and install manually (read: "./configure && make && sudo make install"). While you will have to put in a username, you can use your fingerprint instead of the password (though I highly recommend leaving a way for you to get into your computer without it, because the PAM module for fingerprint ID on that isn't quite mature yet).

If the dv2k is the same as mine (or also supported by libfprint) you can get the information needed to set it up libfprint. To find out model you have, try running "lsusb" (in terminal). My model is an Authentec, and uses a driver that's in the Ubuntu repos (aes2505 or something like that, I don't have the laptop on hand to check now), so if you have that too, you'll probably be good.

Also, looking at the libfprint wiki for the first time in quite a few months, I'm very pleasantly surprised at how much the project seems to have matured. Setting this up will probably be fun and lucrative in the end. Have fun with it and tell us how it goes.

I'm not sure I want to use my fingerprint as the password since I've read that it isn't that secure and having too ways to login would be even more insecure. I don't really have anything to hide, but I enjoy having a secure system. I'm sure there's something interesting I can do with it though.

[Prometheum]

What do you mean by "it isn't that secure"? It's your fingerprint. Unless someone can duplicate your fingerprint, it's fairly secure. Having authentication based on something you are and something you know is far more secure than just the latter.

http://www.ccc.de/press/releases/200...de?language=en

I also read that shining a very bright light at it could trick it or something. I'm going to bed but I'll find more tomorrow.

[Prometheum]

Originally Posted by DiamondX

http://www.ccc.de/press/releases/200...de?language=en

I also read that shining a very bright light at it could trick it or something. I'm going to bed but I'll find more tomorrow.

Whoa, well okay. You can set up the PAM configuration to have it ask your fingerprint then your password, and from that, it seems like that's the best thing to do. Just read the documentation and put the needed stanzas in the config (probably change sufficient to required or some other such thing, though I would still not be dependent on an immature PAM module).

I don't know about the bright light thing, but if CCC can break it, "anyone" can, and I'd agree with you about not trusting it.

Originally Posted by Prometheum

Whoa, well okay. You can set up the PAM configuration to have it ask your fingerprint then your password, and from that, it seems like that's the best thing to do. Just read the documentation and put the needed stanzas in the config (probably change sufficient to required or some other such thing, though I would still not be dependent on an immature PAM module).

I don't know about the bright light thing, but if CCC can break it, "anyone" can, and I'd agree with you about not trusting it.

Okay, I'll go RTFM. For some reason I always forget to do that. I UTFSE but never RTFM.

[Prometheum]

Originally Posted by DiamondX

Okay, I'll go RTFM. For some reason I always forget to do that. I UTFSE but never RTFM.

I'd tell you what I used to have, but I don't have it set up anymore

You should always RTFM, though. It's usually smarter than totse.