[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2020-08-21 Thread Bug Watch Updater
** Changed in: fprintd Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1822590 Title: Found storing user fingerprints without encryption

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-05-07 Thread Bug Watch Updater
** Changed in: debian Status: Unknown => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1822590 Title: Found storing user fingerprints without encryption

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-05-07 Thread Seth Arnold
Incidentally, there's nothing for the AppArmor project to do here -- any confined program will include or not include the fingerprint data as specified in the profile. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ap

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-05-07 Thread Seth Arnold
I'll include as a comment my reply to an email from the reporter: Hello, Note that the Ubuntu security team considers fingerprints to be akin to usernames, rather than passwords. They cannot be changed, they are left on thousands of objects daily, and repeated demonstrations of sensors being 'foo

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-05-07 Thread Salvatore Bonaccorso
** Bug watch added: Debian Bug tracker #926749 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926749 ** Also affects: apparmor (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926749 Importance: Unknown Status: Unknown ** No longer affects: apparmor (Debian) ** A

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-04-15 Thread Seong-Joong Kim
In Ubuntu, that would be good. Btw, I would like to request escalate importance. I think that this issue can be even more important than password exposure in cleartext. Once fingerprint has been leaked, victims are leaked for the rest of life since it lasts for a life. Then, it severely affects

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-04-10 Thread Bug Watch Updater
** Changed in: fprintd Status: Unknown => New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1822590 Title: Found storing user fingerprints without encryption Sta

[Touch-packages] [Bug 1822590] Re: Found storing user fingerprints without encryption

2019-04-10 Thread Sebastien Bacher
It would probably be useful for Ubuntu to have an apparmor profile there ** Changed in: fprintd (Ubuntu) Importance: Undecided => Low ** Changed in: fprintd (Ubuntu) Status: New => Triaged ** Also affects: fprintd via https://gitlab.freedesktop.org/libfprint/fprintd/issues/16 Imp