facebook
twitter
rss
account
search
search
 

Software flaw endangers laptop security

Sept. 6, 2012 at 5:57 PM   |   Comments

MOSCOW, Sept. 6 (UPI) -- A flaw in software that controls security fingerprint readers on laptop computers can expose all files and documents on a PC, Russian security experts say.

Laptops from many of the world's top PC makers contain fingerprint readers that utilize the vulnerable software, ZDNet reported Thursday. Russia's ElcomSoft, a developer of Windows software, said it discovered a flaw in the UPEK Protector Suite, a fingerprint reader software program, that compromises a computer's security.

Protector Suite lets users utilize a finger swipe in place of entering a password. The software records passwords to Web sites and Windows itself to support the one-finger logon.

"We found that your Windows account passwords are stored in Windows registry almost in plain text, barely scrambled but not encrypted," ElcomSoft's Olga Koksharova wrote in a blog. "We could extract passwords to all user accounts with fingerprint-enabled logon. Putting things into perspective: Windows itself never stores account passwords unless you enable 'automatic login,' which is discouraged by Microsoft."

Windows allows activation of the setting after warning users automatic logon is a security risk.

The UPEK flaw is "nothing but a big, glowing security hole compromising the entire security model of Windows accounts," ElcomSoft said.

Laptop manufacturers using UPEK software include Acer, ASUS, Dell, Gateway, Lenovo, MSI, NEC, Samsung, Sony, and Toshiba.

Users with UPEK Protector Suite software should disable the Windows logon feature, ElcomSoft said.

© 2012 United Press International, Inc. All Rights Reserved. Any reproduction, republication, redistribution and/or modification of any UPI content is expressly prohibited without UPI's prior written consent.
Recommended UPI Stories
Most Popular
1
Southwest U.S. could face 35-year 'megadrought'
2
Hurricane Katrina nine years later
3
Latvia boasts world's first net for migrating bats
4
New space debris monitoring facility set for Australia
5
Poacht follows dating app model to match job seekers with careers
Trending News
Video
x
Feedback