Re: Password Security

["Scholz, Greg" <gscholz () KEENE EDU>]

I have been using an APC fingerprint reader for some time now on my
office (and home) pc that came with "OmniPass" password vault software.
http://www.softexinc.com/product.asp?product=omnipass3

The vault works regardless of if your fingerprint reader is attached and
functioning.  Without the finger print reader it prompts for your
"master password" which is default to your domain password but can be
changed.

Whenever an application it can work with asks for the password it pops
up with the fingerprint reader prompt. It can be configured with a few
different auto entry options such as to "click" OK automatically to
automatically and/or to auto enter the password if you're logged into
the password app globally.

It has worked for protected excel files and pretty much every web site
that I use.  The only thing that does not work so far is a couple of
java based programs.

_________________________
Thank you,
Gregory R. Scholz
Director of Telecommunications
Information Technology Group
Keene State College
(603)358-2070
 
--Lead, follow, or get out of the way. 
(author unknown)
 

-----Original Message-----
From: Gary Dobbins [mailto:dobbins () ND EDU] 
Sent: Wednesday, October 24, 2007 8:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Password Security

Another good one is KeePass (SourceForge).  Its fan community has also 
produced a PDA (WinMobile) version, and many features.  Confusingly 
similar to PWSafe.

Shalla, Kevin wrote:
> That sounds like a handy one for certain situations, however most of
the
> time I need to store passwords that I'll be entering from my computer,
and
> I'd rather not have to look up the password on the Palm, then retype
it on
> the computer.  Password safe (written by Bruce Schneier) is a good
free
> program that stores them on your computer.  Once you open the safe,
you
> double-click the desired listing, and the password is put into the
Windows
> paste buffer (you don't even see it, so you can even do this on a
> projector while others are watching).
>
> On Wed, October 24, 2007 5:38 pm, Paul Russell wrote:
>   
> > On 10/23/2007 19:07, Vicky Walker wrote:
> >     
> > > David's response leads me to ask what the general consensus is about
the
> > > safety of Password Safes and what are the best ones out there today?
> > >
> > >       
> > For the past several years, I and some of my co-workers have been
using a
> > product called STRIP (Secure Tool for Recalling Important Passwords),
for
> > Palm OS. I believe it was written by a sysadmin who could not find a
> > password-keeper application that met his needs.
> >
> > See http://www.identicentric.com/products/strip/ for details.
> >
> > --
> > Paul Russell, Senior Systems Administrator
> > OIT Messaging Services Team
> > University of Notre Dame
> > prussell () nd edu
> >
> >
> >     

-- 

  Gary Dobbins, CISSP -- Director, Information Security
  University of Notre Dame, Office of Information Technologies