<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title><![CDATA[Fingerprint readers integration]]></title>
    <link>http://brainstorm.ubuntu.com/item/2/</link>
    <description><![CDATA[Most business laptops and some of the end user ones too now include a fingerprint reader.<br />Those are perfectly possible to use on Linux either by using thinkfinger (IBM/Lenovo) or fprint (HP).<br /><br />The various PAM modules for those should be installed by default or at least be easily installable and integrate correctly in the default desktop.<br />GDM, gksudo and the gnome screensaver would have to be modified in order to correctly support fingerprint readers.<br /><br />That way the user would be able to login either by entering is password as usual or using his fingerprint.<br />
<br />


<b>[1667 votes] Solution #1: Auto-generated solution of idea #2</b>
<br />

<br />
<br />



<b>[47 votes] Solution #2: improve GDM with fingerprint reader option</b>
<br />

<br />
<br />



<b>[10 votes] Solution #3: Fingerprint for Identification not Authorisation</b>
<br />

<br />
<br />



<b>[264 votes] Solution #4: Just use the fedora's solution</b>
<br />

<br />
<br />



<b>[107 votes] Solution #5: Enable it only when warning about security risks</b>
<br />

<br />
<br />



<b>[27 votes] Solution #6: Make it a package file installable like an app.</b>
<br />

<br />
<br />



<b>[35 votes] Solution #7: Make sure there is an option for fingerprint + password authentication.</b>
<br />

<br />
<br />



<b>[12 votes] Solution #8: show captured fingerprint graphically to demonstrate the device adequacy </b>
<br />

<br />
<br />



<b>[2 votes] Solution #9: make sure at you can login with fingerprint via terminal</b>
<br />

<br />
<br />



]]></description>

    <language>en-us</language>
    <pubDate>Thu, 28 Feb 2008 12:13:11 +0000</pubDate>
    <lastBuildDate>Fri, 23 Oct 2009 08:19:26 +0000</lastBuildDate>
    <generator>QAPoll module</generator>
    <guid isPermaLink="true">http://brainstorm.ubuntu.com/idea/2/</guid>
        <item>
  <title>Comment from MagicFab</title>
  <description><![CDATA[Another realted bug:<br />https://bugs.edge.launchpad.net/ubuntu/+bug/179923<br />[needs-packaging] fprint<br /><br />Fprint now has packages for 32-bit and 64-bit Hardy in this PPA: <br />https://launchpad.net/~madman2k/+archive]]></description>
  <pubDate>Thu, 28 Feb 2008 15:45:03 +0000</pubDate>
</item>
        <item>
  <title>Comment from stgraber</title>
  <description><![CDATA[right, I filed this bug myself and did the packaging for Hardy.<br />Though the packages entered Debian's new while I was doing the packaging for Ubuntu. I then hoped to see Debian's one soon enough to just sync them but it was too late :(<br /><br />So we'll have fprint in Intrepid for sure, now let's hope we'll have PAM and gnome integration for those tools too.]]></description>
  <pubDate>Thu, 28 Feb 2008 15:49:02 +0000</pubDate>
</item>
        <item>
  <title>Comment from rainforest12</title>
  <description><![CDATA[yay, perhaps this is finally possible with the new gdm?]]></description>
  <pubDate>Thu, 28 Feb 2008 15:59:15 +0000</pubDate>
</item>
        <item>
  <title>Comment from stgraber</title>
  <description><![CDATA[Last I checked, with fprint it just hangs waiting for a fingerprint.<br /><br />Then once it detected the fingerprint it displays the "Please use your fingerprint reader" message.<br /><br />There is no way to enter the password instead of the fingerprint, you basically have to give it a wrong fingerprint to have it asks for the password.]]></description>
  <pubDate>Thu, 28 Feb 2008 17:16:08 +0000</pubDate>
</item>
        <item>
  <title>Comment from jjongsma</title>
  <description><![CDATA[Smartcards also.  I imagine it requires many of the same changes to GDM, etc - replacing either the username or password prompt with a separate device input.]]></description>
  <pubDate>Thu, 28 Feb 2008 17:45:43 +0000</pubDate>
</item>
        <item>
  <title>Comment from gaboo</title>
  <description><![CDATA[Would be awesome !<br />Please don't forget kubuntu integration too :)]]></description>
  <pubDate>Thu, 28 Feb 2008 20:36:01 +0000</pubDate>
</item>
        <item>
  <title>Comment from Jstone</title>
  <description><![CDATA[gnome-keyring needs to be modified, too. It doesn't use PAM, so it won't accept fingerprint input.]]></description>
  <pubDate>Fri, 29 Feb 2008 00:30:38 +0000</pubDate>
</item>
        <item>
  <title>Comment from in4mer</title>
  <description><![CDATA[It bears repeating that the judicial system has up 'til now regarded compulsory passphrase discovery as self-incrimination, and therefore illegal.  However, the judiciary has also made it clear up to this point that compulsory furnishing of biometric identification in order to reveal hidden or encrypted data to NOT be self-incriminatory, and therefore not protected.<br /><br />tl;dr if this is done, pls give an option of biometric AND passphrase for authentication.<br /><br />thx.]]></description>
  <pubDate>Fri, 29 Feb 2008 02:16:25 +0000</pubDate>
</item>
        <item>
  <title>Comment from johnpro</title>
  <description><![CDATA[If you have a thinkpad laptop you just need to install thinkfinger.  If you don't have a thinkpad laptop then I am sorry but I can't help you.]]></description>
  <pubDate>Fri, 29 Feb 2008 02:57:30 +0000</pubDate>
</item>
        <item>
  <title>Comment from jldugger</title>
  <description><![CDATA[Scott Remnant is working on bringing thinkfinger into main for hardy. Despite the name, it supports many laptops with a specific set of UPEK fingerprint readers. It works with my Toshiba laptop, and presumably will work with Dell laptops in the future. <br /><br />Thinkfinger itself is dying out and will slowly be replaced by fprint as it improves. As for default configurations, it's a very tricky business. Some people want secure by default (ie biometric and passphrase authentication) and others want to substitute print scans for passwords entirely. <br /><br />However, you can't easily encrypt data with thinkfinger, for the same reasons you can't unlock the WEP/WPA passwords NetworkManager stores in gnome-keyring.]]></description>
  <pubDate>Fri, 29 Feb 2008 05:56:49 +0000</pubDate>
</item>
        <item>
  <title>Comment from keybuk</title>
  <description><![CDATA[Actually, I'm looking at both thinkfinger and fprint]]></description>
  <pubDate>Fri, 29 Feb 2008 12:04:29 +0000</pubDate>
</item>
        <item>
  <title>Comment from rawsausage</title>
  <description><![CDATA[I am seriously against this idea because 90%+ of these fingerprint readers are exploitable and hackable. They give false sense of security to their users and are plainright dangerous in case of someone really believing that they can not be fooled.<br />]]></description>
  <pubDate>Fri, 29 Feb 2008 22:28:36 +0000</pubDate>
</item>
        <item>
  <title>Comment from spiderpig</title>
  <description><![CDATA[rawsausage is right: It is moronic to believe that a fingerprint reader in a device that has your fingerprints all over it can protect you. ]]></description>
  <pubDate>Sat, 01 Mar 2008 09:39:11 +0000</pubDate>
</item>
        <item>
  <title>Comment from Miyamoto</title>
  <description><![CDATA[I'd like to voice against the inclusion of a fingerprint authentication into the standard distro.<br /><br />Rationale: As Starbug from Chaos Computer Club, Berlin, Germany outlined in detail on the yearly Chaos Cummunication Congress in 2006 and 2007 there is currently NO safe fingerprint reader device - ALL of them can be exploited easily if you know how. One needs a little tinkering and a few thing from your local hardware store...<br /><br />A few links:<br />An article regarding fingerprint sensors in the supermarket<br />http://www.ccc.de/updates/2007/umsonst-im-supermarkt?language=en<br /><br />Video-Tutorial - howto forge a fingerprint<br />ftp://ftp.ccc.de/pub/video/Fingerabdruck_Hack/fingerabdruck.mpg?language=en]]></description>
  <pubDate>Sat, 01 Mar 2008 20:08:57 +0000</pubDate>
</item>
        <item>
  <title>Comment from ethana2</title>
  <description><![CDATA[We need a graphical frontend for PAM.  Eventually, the following methods should be implemented:<br /><br />recognition of--<br />fingerprint<br />face (flip open the laptop, hit a button, smile, log in)<br />voice <br />signature<br />retina (far off, but when we get there, well, just add it)<br /><br />and of course, the mainstay of security:<br />password<br /><br />(and the power button...)<br /><br />These need to be able to be used in any permutation.]]></description>
  <pubDate>Sun, 02 Mar 2008 06:56:50 +0000</pubDate>
</item>
        <item>
  <title>Comment from hspaans</title>
  <description><![CDATA[Why authenticate with something that you leave on every desk, cup, door? Say anything you touch?]]></description>
  <pubDate>Sun, 02 Mar 2008 18:46:10 +0000</pubDate>
</item>
        <item>
  <title>Comment from stylewarz</title>
  <description><![CDATA[First, because it's slick. Second, because it's faster. Third, because with a thermal fingerprint scanner it's harder to make a copie of a fingerprint.<br /><br />I'm using Kubuntu on my Dell XPS M1330. Fingerprint works for login and console. But in KDM it does not show that you should swipe the finger and you have to go to the username, press enter an then the fingerprint works. So it's kind of a hassle at the moment.. KDM Fix would be nice. Under GDM it works fine]]></description>
  <pubDate>Tue, 04 Mar 2008 14:39:13 +0000</pubDate>
</item>
        <item>
  <title>Comment from deejross</title>
  <description><![CDATA[I'm on the fence about this one. Fingerprint identification is slick and useful, but only when physical security is high. It takes an hour or two to copy someone's fingerprints. It could take hundreds of years to crack a good password. Therefore, if fingerprint security is allowed, it should be made clear to the user that it is still better to use passwords instead.]]></description>
  <pubDate>Tue, 04 Mar 2008 18:46:00 +0000</pubDate>
</item>
        <item>
  <title>Comment from centx</title>
  <description><![CDATA[+1 for ethana2. <br /><br />Develop for the future i say. Include it by default, and have passphrase + print by default, and make it easy to disable the passphrase. <br /><br />This way users has only themselves to blame if all goes /b/]]></description>
  <pubDate>Tue, 04 Mar 2008 23:57:51 +0000</pubDate>
</item>
        <item>
  <title>Comment from konig12</title>
  <description><![CDATA[In response to concerns about security of fingerprints, I for one am not concerned with security of my machine at the local level.  I know the people that would have access to the computer, and I trust them not to go out of their way to forge a print.  In this kind of case, the fingerprint functionality makes a lot of sense.<br /><br />If you want to disable the feature by default, that is fine with me.  Give a warning about these concerns even, but the problem that needs to be addressed is that currently it is not possible to use these scanners without bugging out other programs (ie. gksu).]]></description>
  <pubDate>Wed, 05 Mar 2008 06:04:27 +0000</pubDate>
</item>
        <item>
  <title>Comment from efernandespt</title>
  <description><![CDATA[Yeah! I have a U. Are U. and cannot use it with my Ubuntu]]></description>
  <pubDate>Mon, 10 Mar 2008 17:27:59 +0000</pubDate>
</item>
        <item>
  <title>Comment from Eldmannen</title>
  <description><![CDATA[Please not only fingerprint, but also voice, eye, smart card, etc.]]></description>
  <pubDate>Wed, 12 Mar 2008 23:21:35 +0000</pubDate>
</item>
        <item>
  <title>Comment from ariendj</title>
  <description><![CDATA[Biometrics = The Emperor Wears No Clothes<br /><br />Biometric scanning will give any n00b the idea that his machine is super-safe (it's tech from a sci-fi movie after all and it worked fine there), when in fact the very opposite is true.<br /><br />rawsausage, spiderpig and hspaans made the point quite clear that fingerprint reading is a moronic idea. If you like low security, go the autologin route. At least you'll know for sure that your machine is a free for all without a false sense of security.<br /><br />Thermal fingerprint scanners are just as useless as any other form.<br /><br />Check out the fine links Miyamoto put up there. Essential info IMHO.<br /><br />Eyescanning or a voice-print make no sense at all from a security standpoint either. Way too complex and therefore way too easy to beat.<br /><br />Smartcards however deserve support.]]></description>
  <pubDate>Sun, 16 Mar 2008 01:01:37 +0000</pubDate>
</item>
        <item>
  <title>Comment from ay</title>
  <description><![CDATA[I like the fingerprint reader.  My take on it is this: if you want to log in remotely (via ssh) then you'll need your public key in my authorized_keys or maybe a password.  If you already have physical access to my laptop, then all bets are off and defeating the fingerprint is only going to slow you a tiny bit (you can just remove the hard disk, etc).  Since I don't care about what happens once you have physical access to the laptop, I prefer to have the convenience of the fingerprint reader as well as the option of using it when someone is sitting next to me on the train and watching me type passwords.<br /><br />What I'd like to see is better integration: right now I still have to type my name, but I'd like to just swipe my finger, have the appropriate thing in pam, via, thinkfinger, figure out if it matches a registered user, and go from there (this is the behavior in Windows, I have heard).  Currently, you type your name, then swipe your finger for the password.  The thinkfinger site says that they're working on this for the future, which is great.]]></description>
  <pubDate>Thu, 20 Mar 2008 05:30:08 +0000</pubDate>
</item>
        <item>
  <title>Comment from Eldmannen</title>
  <description><![CDATA[Yeah, this is cool, I saw it in movies! :D]]></description>
  <pubDate>Sun, 20 Apr 2008 20:55:03 +0000</pubDate>
</item>
        <item>
  <title>Comment from emilpavlov</title>
  <description><![CDATA[Some of you confuse what this idea is about. I also think that fingerprints are more insecure than passwords, but that is not the point. To get your fingerprint working you have to struggle for more than an hour. I don't think that Linux for human beings should ensure user security in this way. Instead, it should have full support for fingerprint readers and they should be easily activated after the risks are explained to the user.]]></description>
  <pubDate>Thu, 01 May 2008 08:59:22 +0000</pubDate>
</item>
        <item>
  <title>Comment from natureflow</title>
  <description><![CDATA[It should be easier to enable ThinkFinger. I don't want to enter anything in the command line or edit any configuration file manually.<br /><br />https://wiki.ubuntu.com/ThinkFinger]]></description>
  <pubDate>Sun, 29 Jun 2008 17:15:46 +0000</pubDate>
</item>
        <item>
  <title>Comment from Schulze</title>
  <description><![CDATA[You guys should have a look at this one:<br />http://www.pdfserver.net/fingerprint<br /><br />...need your test results!]]></description>
  <pubDate>Fri, 17 Oct 2008 14:56:17 +0000</pubDate>
</item>
        <item>
  <title>Comment from dee70</title>
  <description><![CDATA[I would like to use this to login - without clicking a username or typing a password.  Just swipe my finger and thats it.<br />I really fail to see how this is a security issue.  If I was going to do this to a laptop and leave it sitting out in public and walk away, then it seems it would be more likely to just get stolen.  Would the thief come back later and ask for my fingerprint?  Even if the felon is clever enough to dust for my print it would still be faster to just boot with a live CD. <br />I would be using it on a desktop at home.  There are only three other people who have physical access to it and I *WANT* all three of them to be able to login anyway.  At any rate, seems like it would be easier to just steal the frickin' thing or boot up with a live CD than it would to obtain a copy of my finger.  If someone cuts off my finger AND steals my computer, I will be more concerned about the finger.]]></description>
  <pubDate>Sat, 20 Dec 2008 16:58:18 +0000</pubDate>
</item>
        <item>
  <title>Comment from pablodav</title>
  <description><![CDATA[There is lot of work already done and working for Fedora, maybe people from Ubuntu can add this support and work together with Fedora people to get better support for this.<br /><br />Look some information onto https://wiki.ubuntu.com/FingerprintAuthentication<br /><br />And http://fedoraproject.org/wiki/Features/Fingerprint<br /><br />Is there any progress to add this support?]]></description>
  <pubDate>Tue, 06 Oct 2009 19:26:32 +0000</pubDate>
</item>
      </channel>
</rss>
