faq
flatforty
contribute
subscribe
configure
search
rdf
main
parent
thread
|
Fingerprint reader integration?
by tecnocratus on Monday 18/Feb/2008, @03:33
|
I think first and foremost KDM should remain secure and robust, so I'd dare to say that integrating it with libplasma or merging in flashy openGL effects for the sake of it would be insane ATM.
That said, I could do with some updates in order to reflect the new use cases. My pet whim is support for fingerprint readers. It's been reported for ages, but no one seems to tackle this bug/wish/whatever. GDM can handle fingerprint logon just fine.
Perhaps the devs don't see it as a must-have feature (since not all computers have embedded sensors). But, to put it on another light: it's not *just* fingerprint readers, but all of the upcoming biometric/smartcard/multi-token security features of which we'll be soon seing a surge, specially in corporate environments.
Also, it'd be nice to have KDM auto-unlock KWallet. Single Sign-on, anyone? |
|
|
The Fine Print: The following comments
are owned by whomever posted them.
( Reply )
|
Re: Fingerprint reader integration?
by Kevin Krammer on Monday 18/Feb/2008, @09:51
|
> Also, it'd be nice to have KDM auto-unlock KWallet. Single Sign-on, anyone?
If you are satisfied with protection through login, you can always use a password-less wallet.
|
[
Reply To This | View ]
|
Re: Fingerprint reader integration?
by elsewhere on Monday 18/Feb/2008, @21:20
|
>>Perhaps the devs don't see it as a must-have feature (since not all computers have embedded sensors). But, to put it on another light: it's not *just* fingerprint readers, but all of the upcoming biometric/smartcard/multi-token security features of which we'll be soon seing a surge, specially in corporate environments.
Well, I've been selling two-factor authentication solutions for almost a decade, mostly RSA's, and I'm still waiting for the surge in corporate environments that everyone has been talking about for years now. Was supposed to happen with the dot-com, then it was supposed to happen with SarBox, and now compliance is the alleged driver. The fish still aren't biting... ;)
Having said that, it would be nice to see KDM have some sort of hook or mechanism for strong-authentication, without having to resort to workarounds. Though I'm not sure there is a standard mechanism for this yet that would allow it to be a simple hook.
>>Also, it'd be nice to have KDM auto-unlock KWallet. Single Sign-on, anyone?
That's not SSO. The point of kwallet is to keep your data secure by requiring authentication even within your user environment, it's a separate mechanism from the PAM authentication that the login requires. If you're not concerned about that, then set your wallet with an empty password, and it will still be restricted to you only.
|
[
Reply To This | View ]
|
Re: Fingerprint reader integration?
by Vide on Tuesday 19/Feb/2008, @01:47
|
"That's not SSO. The point of kwallet is to keep your data secure by requiring authentication even within your user environment, it's a separate mechanism from the PAM authentication that the login requires. If you're not concerned about that, then set your wallet with an empty password, and it will still be restricted to you only."
No, then my data will be stored in clear text, and if my laptop get stolen, we have a problem. And while encripting all the home partition is overkill, having PAM authentication to work with kwallet it's not.
I hope that when Gnome will have it (maybe they already do, don't know) we'll really start to feel how useful this feature is.
|
[
Reply To This | View ]
|
Re: Fingerprint reader integration?
by jcs on Thursday 24/Apr/2008, @09:51
|
one good solution is to use an encrypted home and login with pam_mount .. then it's fine to leave kwallet sans password since your passwords will still be encrypted on disk, as will your email, im logs, whatever.
|
[
Reply To This | View ]
|
|
Re: Fingerprint reader integration?
by Aaron Seigo on Tuesday 19/Feb/2008, @09:13
|
> I think first and foremost KDM should remain secure and robust, so I'd dare to
> say that integrating it with libplasma
them's fightin' words ;) seriously though, if you have security or stability concerns with libplasma, please point them out. no, not some random plasmoid here or there, but libplasma itself.
with the scripting support we can increase the robustness of add ons and for kdm the real benefits would be things like being able to host and even share useful common components ... like an on screen keyboard that's part of the canvas, or system information that gets published in a corner somewhere.
|
[
Reply To This | View ]
|
Re: Fingerprint reader integration?
by terracotta on Tuesday 19/Feb/2008, @14:10
|
Or a general part to take care of whatever someone would like to do with fingerprint recognition.
|
[
Reply To This | View ]
|
|
The Fine Print: The previous
comments are owned by whomever posted them.
( Reply )
|
|