Smart Card or Fingerprint Login?

jayo2004

Hi i need to setup a different way for people to log into a workstation. This pc is not on a domain and has about 5 different users. The staff are sharing passwords etc.etc. and I want to clamp down on security. The fingerprint login would be more practical (I think) in this situation as I can see staff losing cards but I have never used either and dont know how reliable they are. Just looking for some info on which would be the best solution. I have tried changing passwords once every 2 weeks but there is a lot of parttime staff coming and going and doesnt seem to work.

biko

Some info on fingerprints here
I actually use fingerprint login, but have a IBM T42 laptop so it's built in. Great feature!

constellation

The recommended is three factor authentication. Something you have, something you know and something you are (i.e. card, password and fingerprint respectively).

Anyway, just to give you a fuller picture. Fingerprint readers can be fooled.

http://news.zdnet.co.uk/security/0,1000000189,2110380,00.htm

Also, sometimes a person may not have a fingerprint

http://news.nationalgeographic.com/news/2006/09/060922-fingerprints.html

/my 2c

Capt'n Midnight

to view the old finger prints on a reader
- super glue fumes
- clear plastic bag of cold water

or sniff the usb cable for a playback attack on some consumer stuff