I have a circa-2009 Lenovo with a fingerprint reader. On my current Windows install, I didn't bother to track down the fingerprint reader software as Windows Update seemed to take care of the driver for it. Is there any way to figure out what software Microsoft is currently distributing (UPEK Protector Suite vs AuthenTec TrueSuite)? The article seemed to imply the latter does not have this flaw, even if the hardware originally came from UPEK.
That won't show the management software though, will it? It's using UPEK drivers because it's a UPEK reader in my case (Thinkpad R61), but the actual fingerprint enrollment and login management is handled through the ThinkVantage software.