Take a look at our
ThinkPads.com HOME PAGE
For those who might want to contribute to the blog, start here: Editors Alley Topic
Then contact Bill with a Private Message
ThinkPads.com HOME PAGE
For those who might want to contribute to the blog, start here: Editors Alley Topic
Then contact Bill with a Private Message
Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
-
- Senior ThinkPadder
- Posts: 2821
- Joined: Sat Oct 30, 2004 4:52 am
- Location: Prague, Czech Republic
Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
Just another Lenovo "Pro" software
https://www.notebookcheck.net/Lenovo-s- ... 494.0.html
https://support.lenovo.com/us/en/produc ... /len-15999
A vulnerability has been identified in Lenovo Fingerprint Manager Pro. Sensitive data stored by Lenovo Fingerprint Manager Pro, including users’ Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system it is installed in.
https://www.notebookcheck.net/Lenovo-s- ... 494.0.html
https://support.lenovo.com/us/en/produc ... /len-15999
A vulnerability has been identified in Lenovo Fingerprint Manager Pro. Sensitive data stored by Lenovo Fingerprint Manager Pro, including users’ Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system it is installed in.
ThinkPad (1992 - 2012): R51, X31, X220
Huawei MateBook 13
Huawei MateBook 13
-
- Senior ThinkPadder
- Posts: 2670
- Joined: Sun Aug 09, 2015 9:25 am
- Location: N. Bellmore, ny
Re: Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
When you make Windows XP security look good, you should be firing the programmer ASAP. Ugh Lenovo.Puppy wrote: ↑Tue Jan 30, 2018 10:40 amJust another Lenovo "Pro" software
https://www.notebookcheck.net/Lenovo-s- ... 494.0.html
https://support.lenovo.com/us/en/produc ... /len-15999
A vulnerability has been identified in Lenovo Fingerprint Manager Pro. Sensitive data stored by Lenovo Fingerprint Manager Pro, including users’ Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system it is installed in.
Thinkpad4by3's Law of the Universe.
The efficiency of two screens equally sized with equal numbers if pixels are equal. The time spent by a 4:3 user complaining about 16:9 is proportional to the inefficiency working with a 16:9 display, therefore the amount of useful work extracted is equal.
The efficiency of two screens equally sized with equal numbers if pixels are equal. The time spent by a 4:3 user complaining about 16:9 is proportional to the inefficiency working with a 16:9 display, therefore the amount of useful work extracted is equal.
Re: Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
Most likely the task was given to a junior programmer without any proper process of training and code review.Thinkpad4by3 wrote: ↑Tue Jan 30, 2018 11:53 amWhen you make Windows XP security look good, you should be firing the programmer ASAP. Ugh Lenovo.
Thinkpad 25 (20K7), T490 (20N3), Yoga 14 (20FY), T430s (IPS FHD + Classic Keyboard), X220 4291-4BG
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
-
- Senior ThinkPadder
- Posts: 2670
- Joined: Sun Aug 09, 2015 9:25 am
- Location: N. Bellmore, ny
Re: Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
Even a Junior programmer could put it in something better than plain text. Is implementing an SHA-256 algorithm that hard? Just downloading a github library would be suffice.dr_st wrote: ↑Tue Jan 30, 2018 2:23 pmMost likely the task was given to a junior programmer without any proper process of training and code review.Thinkpad4by3 wrote: ↑Tue Jan 30, 2018 11:53 amWhen you make Windows XP security look good, you should be firing the programmer ASAP. Ugh Lenovo.
Thinkpad4by3's Law of the Universe.
The efficiency of two screens equally sized with equal numbers if pixels are equal. The time spent by a 4:3 user complaining about 16:9 is proportional to the inefficiency working with a 16:9 display, therefore the amount of useful work extracted is equal.
The efficiency of two screens equally sized with equal numbers if pixels are equal. The time spent by a 4:3 user complaining about 16:9 is proportional to the inefficiency working with a 16:9 display, therefore the amount of useful work extracted is equal.
Re: Lenovo's Fingerprint Manager Pro exposed user passwords, security update released
In this business doing something is often not as hard as understanding why you should do it. This understanding is what junior programmers often lack.Thinkpad4by3 wrote: ↑Tue Jan 30, 2018 3:12 pmEven a Junior programmer could put it in something better than plain text. Is implementing an SHA-256 algorithm that hard? Just downloading a github library would be suffice.
Thinkpad 25 (20K7), T490 (20N3), Yoga 14 (20FY), T430s (IPS FHD + Classic Keyboard), X220 4291-4BG
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
-
- Similar Topics
- Replies
- Views
- Last post
-
-
Best new Win11 ThinkPad for a 15-year user of an x200 ??
by mtgal » Sun Jan 28, 2024 1:59 pm » in Thinkpad AMD-Ryzen - 21 Replies
- 2876 Views
-
Last post by mikemex
Sun Mar 17, 2024 12:07 am
-
-
- 1 Replies
- 379 Views
-
Last post by TPFanatic
Wed Feb 28, 2024 7:06 pm
-
-
T14 Gen3 (Intel) and SSD Samsung 990 Pro 4TB
by Jan_888 » Tue Feb 13, 2024 5:54 pm » in Thinkpad T14/T15/T16 - 1 Replies
- 562 Views
-
Last post by ZaZ
Thu Feb 15, 2024 7:56 pm
-
-
-
T580 Compared to Classic Thinkpads and Macbook Pro
by MisterB » Fri Mar 15, 2024 12:51 pm » in ThinkPad T430-T490 / T530-T590 Series - 0 Replies
- 97 Views
-
Last post by MisterB
Fri Mar 15, 2024 12:51 pm
-
Who is online
Users browsing this forum: No registered users and 33 guests