facebook
twitter
rss
account
search
search
 

Software flaw endangers laptop security

Sept. 6, 2012 at 5:57 PM   |   Comments

MOSCOW, Sept. 6 (UPI) -- A flaw in software that controls security fingerprint readers on laptop computers can expose all files and documents on a PC, Russian security experts say.

Laptops from many of the world's top PC makers contain fingerprint readers that utilize the vulnerable software, ZDNet reported Thursday. Russia's ElcomSoft, a developer of Windows software, said it discovered a flaw in the UPEK Protector Suite, a fingerprint reader software program, that compromises a computer's security.

Protector Suite lets users utilize a finger swipe in place of entering a password. The software records passwords to Web sites and Windows itself to support the one-finger logon.

"We found that your Windows account passwords are stored in Windows registry almost in plain text, barely scrambled but not encrypted," ElcomSoft's Olga Koksharova wrote in a blog. "We could extract passwords to all user accounts with fingerprint-enabled logon. Putting things into perspective: Windows itself never stores account passwords unless you enable 'automatic login,' which is discouraged by Microsoft."

Windows allows activation of the setting after warning users automatic logon is a security risk.

The UPEK flaw is "nothing but a big, glowing security hole compromising the entire security model of Windows accounts," ElcomSoft said.

Laptop manufacturers using UPEK software include Acer, ASUS, Dell, Gateway, Lenovo, MSI, NEC, Samsung, Sony, and Toshiba.

Users with UPEK Protector Suite software should disable the Windows logon feature, ElcomSoft said.

© 2012 United Press International, Inc. All Rights Reserved. Any reproduction, republication, redistribution and/or modification of any UPI content is expressly prohibited without UPI's prior written consent.
Most Popular
1
Massive sunspot sending violent flares toward Earth Massive sunspot sending violent flares toward Earth
2
Google exec breaks skydive record with dive from near-space Google exec breaks skydive record with dive from near-space
3
Powerful new microscope sees cell division in real time Powerful new microscope sees cell division in real time
4
Coal-rich Poland wants concessions in EU climate deal Coal-rich Poland wants concessions in EU climate deal
5
Stone tools reveal Ice Age settlement in the Andes Stone tools reveal Ice Age settlement in the Andes
Trending News
Around the Web
x
Feedback