It could be that they've cleaned up their software.  The web site has a
"new" driver, v3.2 available.  I let them know - back 18 months ago when I
had the hardware for eval - that the way they were doing things wasn't
acceptable.  Interestingly, one of the utility programs only works up to
v3.1 of the software.

The best test for what they're doing would be to rename their rename of
msgina.dll to something else (not a .dll file) and see if you can still log
in.  Of course, if I'm still right about how the software works, I guess
you've just converted the machine into a boat anchor unless you have the
recovery console installed...

If they have fixed the software, then it is an interesting toy.  Not a bad
mouse either...

-----Burton

-----Original Message-----
From: Jeff Kerber [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 03, 2002 12:55 PM
To: Burton M. Strauss III; [EMAIL PROTECTED]
Cc: Nina V. Levitin; James Kelty
Subject: RE: Physical Access Control


The solution that I am intimately familiar with doesn't use the MSGina as
you describe. In addition, the domain password is not stored locally, but on
an authentication server. It is encrypted as you say. In addition, the
domain password can be controlled by the authentication server and is
randomly generated 256 characters long with a strong mix of cases, symbols,
etc.

-----Original Message-----
From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 01, 2002 3:16 PM
To: [EMAIL PROTECTED]
Cc: Nina V. Levitin; James Kelty
Subject: RE: Physical Access Control


I've posted on this specific hardware device before... yes, it's cool, but
the implementation leaves a lot to be desired.

What it does is to substitute a new gina.dll for msgina.dll.  This new gina
captures the fingerprint, compares it and then retrieves your stored domain
password from the hard drive (security/encryption of same unspecified) and
invokes the original msgina.dll with that value.

Risks left to the imagination...

-----Burton


-----Original Message-----
From: Nina V. Levitin [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 29, 2002 3:46 PM
To: James Kelty; [EMAIL PROTECTED]
Subject: RE: Physical Access Control


Seimen's makes a mouse that uses finger print identification.  There is a
program that use the mouse and does network and application sign on.  I have
tested it in a lab but do not user it.  Pretty cool toys but I have no idea
how well it works on a day to day basis.

So check out Seimen's website for their biometric mouse.  It should get you
started.

-Kit

>>-----Original Message-----
>>From: James Kelty [mailto:[EMAIL PROTECTED]]
>>Sent: Wednesday, March 27, 2002 3:07 PM
>>To: [EMAIL PROTECTED]
>>Subject: Physical Access Control
>>
>>
>>Hello!
>>
>>I am looking for a good vendor of fingerprint physical access control
>>solutions, but I don't have the foggiest idea of where to
>>start. I have done
>>a few google.com searches, but I was hoping that some of you
>>may have some
>>suggestions. Thanks in advance!
>>
>>-James
>>
>>
>>James Kelty
>>Sr. Unix Systems Administrator
>>The Ashland Agency
>>541.488.0801
>>[EMAIL PROTECTED]
>>
>>


Reply via email to