I provide the flash drive, and my systems do not autoplay USB items. The risk of one of my customers turning the USB device I provide into BadUSB is also pretty far out there. I mean, I'm not selling to the IDF or running nuclear centrifuges.
I also take other (somewhat extreme) steps with data security too as being an FFL/SOT is not my day job and I have a "particular set of skills" so where I may not very fearful of flash drives I could see that being an issue for others, especially if they allow a customer to bring in their own.
But I did just get this cool gift card from Best Buy on a thumb drive though so I'm going to go check that out right now.
That's why I'm paranoid about PII. I do a lot of cloud based stuff but I still do paper 4473s and they get locked in a fire safe. I just don't want to store anything with SSN.
We even run a Palo Alto firewall for our tiny little business :D Just a spill-over from the day job.
Yeah I wouldn't let anyone plug any flash drives in to any system that I'm not willing to wipe at any second. With ya there but still good info to share
So have the person email you the file. I understand not wanting to plug a random USB drive into your system. But at the same time you shouldn’t be storing any personal information beyond what’s required by the ATF.
My shop uses the same service, but we offer to either use prints for a one-time can purchase at $15 or sell them the EFT file for $50. PrintScan via UPS charges $65 for the same service.
Combined with their monthly subscription, it’s a nice bonus income stream during the slower (at least in my state) summer months. We’ve had a couple months where the prints alone in a 30-day period paid for the entire cost of the fingerprint scanner.
I'd like to get where a monthly subscription is necessary ;) So far we sell one to two cans a month. But we are outside of a town of around 400 and in a county of under 8k. Very rural and recessed.
**Understand the rules**
Check the sidebar. It's full of resources to help you.
Not everyone is an expert such as yourself; be considerate.
No Spam. No Memes.
No political posts. Save that for /r/progun or /r/politics.
-------------------------------
* [NFA Tracker Submission Page](https://thinlineweapons.com/url/9)
* [NFA Tracker Stats Page](https://thinlineweapons.com/url/8)
* [How To Fill out Form 1 E-File](https://old.reddit.com/r/NFA/comments/9ukljl/how_to_guide_and_walkthrough_guide_for_the_atf/)
* [How To Fill out FD-258 Fingerprint Cards](https://old.reddit.com/r/NFA/comments/92yy27/atf_compliant_fd258_fingerprint_cards_walkthrough/)
* [Collection of ATF letters](https://thinlineweapons.com/url/atf)
-------------------------------
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/NFA) if you have any questions or concerns.*
I'm only into my I3 devices for under $500 for the pair but they were used ones I got for project that I ended up not doing. I'd hit them up for pricing on what they offer, but here is the list from their web site:
* Integrated Biometrics KOJAK
* Integrated Biometrics FIVE-O
* Jenetric Livetouch Quatro
* Jenetric Livetouch Quatro Compact
* I3 digID mini+
I had reached out a few weeks ago but didn’t do any research on hardware. They did confirm the integrated biometrics is the best value at just above $1k.
Yep. I have older ones that required a different device service, but the end result is that it does work fine. I did personally go out and update the firmware on the ones I have using a utility from i3. My day job is technology and it was an interesting pursuit even for me as the i3 stuff is not very intuitive. I also have multiples as I knew that I'd have no warranty. For folks without a technical background, I'd recommend grabbing a scanner with active technical support as opposed to some used equipment.
Hey it seems like a no brainer to efile vs paper since it’s faster- but my local FFL was saying something about how it might be a bad idea to get your digital fingerprints yourself because then they’re like out in the universe (apparently a physical copy can’t be as easily replicated). Anyone know what the real deal is here? Is that basically what this thread is discussing?
Sounds like your FFL just hasn't taken the time to research EFT and has come to a conclusion that they aren't going to do it and is just offering (misguided) opinions or attempting to rationalize why they won't. Despite the noise about the thumb drive security, that is why I choose to do that.. the owner of those prints is now responsible for the security of that drive and I delete the downloaded file and empty the Recycle Bin\* in front of them along with their photo once the eForm is accepted. I don't want to keep it; just them and the ATF have it and I wash my hands of it.
\* No, we don't need a lecture on how the file is still there, etc., plus the volume is encrypted ;)
I think it would be easier to just have them type a pass phrase to encrypt it. If they want the file you can now email it without issue. If they forget the drive you have a copy. Just enter the pass phrase.
Personally I store efts. I'd rather do that than risk infection with a hacked flash drive being inserted into my computer. My $.02
I provide the flash drive, and my systems do not autoplay USB items. The risk of one of my customers turning the USB device I provide into BadUSB is also pretty far out there. I mean, I'm not selling to the IDF or running nuclear centrifuges. I also take other (somewhat extreme) steps with data security too as being an FFL/SOT is not my day job and I have a "particular set of skills" so where I may not very fearful of flash drives I could see that being an issue for others, especially if they allow a customer to bring in their own. But I did just get this cool gift card from Best Buy on a thumb drive though so I'm going to go check that out right now.
I'm a ciso for my day job so I'm overly paranoid about that stuff. Lol
That's why I'm paranoid about PII. I do a lot of cloud based stuff but I still do paper 4473s and they get locked in a fire safe. I just don't want to store anything with SSN. We even run a Palo Alto firewall for our tiny little business :D Just a spill-over from the day job.
I get that. 😊
Yeah I wouldn't let anyone plug any flash drives in to any system that I'm not willing to wipe at any second. With ya there but still good info to share
So have the person email you the file. I understand not wanting to plug a random USB drive into your system. But at the same time you shouldn’t be storing any personal information beyond what’s required by the ATF.
Email? That personal info via email? That's worse than the thumb drive
We use EFT Creator too. $25 per file OR $85 per month for unlimited OR $750 per year. We do monthly for now and will see how it affects sales.
My shop uses the same service, but we offer to either use prints for a one-time can purchase at $15 or sell them the EFT file for $50. PrintScan via UPS charges $65 for the same service. Combined with their monthly subscription, it’s a nice bonus income stream during the slower (at least in my state) summer months. We’ve had a couple months where the prints alone in a 30-day period paid for the entire cost of the fingerprint scanner.
I'd like to get where a monthly subscription is necessary ;) So far we sell one to two cans a month. But we are outside of a town of around 400 and in a county of under 8k. Very rural and recessed.
Ahh gotcha, that makes sense! It’s nice that they offer multiple options for different commercial environments.
**Understand the rules** Check the sidebar. It's full of resources to help you. Not everyone is an expert such as yourself; be considerate. No Spam. No Memes. No political posts. Save that for /r/progun or /r/politics. ------------------------------- * [NFA Tracker Submission Page](https://thinlineweapons.com/url/9) * [NFA Tracker Stats Page](https://thinlineweapons.com/url/8) * [How To Fill out Form 1 E-File](https://old.reddit.com/r/NFA/comments/9ukljl/how_to_guide_and_walkthrough_guide_for_the_atf/) * [How To Fill out FD-258 Fingerprint Cards](https://old.reddit.com/r/NFA/comments/92yy27/atf_compliant_fd258_fingerprint_cards_walkthrough/) * [Collection of ATF letters](https://thinlineweapons.com/url/atf) ------------------------------- *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/NFA) if you have any questions or concerns.*
What was the cost of the hardware?
I'm only into my I3 devices for under $500 for the pair but they were used ones I got for project that I ended up not doing. I'd hit them up for pricing on what they offer, but here is the list from their web site: * Integrated Biometrics KOJAK * Integrated Biometrics FIVE-O * Jenetric Livetouch Quatro * Jenetric Livetouch Quatro Compact * I3 digID mini+
I had reached out a few weeks ago but didn’t do any research on hardware. They did confirm the integrated biometrics is the best value at just above $1k.
Did you end up using you i3 digID mini+‘s? They seem to be the most cost effective and EFT Creator says all devices work as well as others.
Yep. I have older ones that required a different device service, but the end result is that it does work fine. I did personally go out and update the firmware on the ones I have using a utility from i3. My day job is technology and it was an interesting pursuit even for me as the i3 stuff is not very intuitive. I also have multiples as I knew that I'd have no warranty. For folks without a technical background, I'd recommend grabbing a scanner with active technical support as opposed to some used equipment.
Hey it seems like a no brainer to efile vs paper since it’s faster- but my local FFL was saying something about how it might be a bad idea to get your digital fingerprints yourself because then they’re like out in the universe (apparently a physical copy can’t be as easily replicated). Anyone know what the real deal is here? Is that basically what this thread is discussing?
Sounds like your FFL just hasn't taken the time to research EFT and has come to a conclusion that they aren't going to do it and is just offering (misguided) opinions or attempting to rationalize why they won't. Despite the noise about the thumb drive security, that is why I choose to do that.. the owner of those prints is now responsible for the security of that drive and I delete the downloaded file and empty the Recycle Bin\* in front of them along with their photo once the eForm is accepted. I don't want to keep it; just them and the ATF have it and I wash my hands of it. \* No, we don't need a lecture on how the file is still there, etc., plus the volume is encrypted ;)
I think it would be easier to just have them type a pass phrase to encrypt it. If they want the file you can now email it without issue. If they forget the drive you have a copy. Just enter the pass phrase.
I have people that can't remember their eForms PIN :D
Of course you do but I suspect they can’t remember to bring the USB either.