On 1 February 2008 14:49:14 Vishal Rao wrote:

> I think you should just reject the attempt if it matches multiple
> users and ask to retry.

But what to do if I want to use fingerprint to gain root privileges?
You can say that it's secure, but I don't keep confidential files on my 
laptop ;)

> For example, what if there is a system with just 2 users, you and me?
>
> Then if I attempt a login and it prompts for username then I
> immediately know I can provide your username and read your private
> documents :-)

I think if there's two accounts with same fingerprint enrolled, these accounts 
belong to one unique person, aren't they?

> Similarily, the user with higher "priority" gets lower security,
> because if a lower priority user attempts login and it matches the
> higher priority user, it will give one user access to another user's
> account... no?

Therefore, I want to give higher "priority" to user with lower privileges. 
For example, I have 2 accounts: one is root, it has privilige == 0,
and my user, is has privilige == 2

Btw, If you have any suggestion how to handle situation with 2 accounts with 
same fingerprint enrolled - you're welcome ;)

Regards,
Vasily
_______________________________________________
fprint mailing list
[email protected]
http://lists.reactivated.net/mailman/listinfo/fprint

Reply via email to