GitHub user Zimeng Xiong has developed a DIY fingerprint scanner using an ESP32S3 microcontroller that provides a passwordless authentication alternative for personal computers by utilizing encrypted data transmission.
Key Points
- The device uses an ESP32S3 Seeduino XIAO to authenticate users via fingerprint scans.
- It requests encrypted passwords from a host computer, types them via HID, and immediately clears its memory.
- Security relies on the physical possession of both the computer and the hardware device.
- Potential vulnerabilities include UART spoofing or physical tampering with the fingerprint sensor.
- Project documentation and instructions are publicly available on GitHub for home implementation.