Everything USBNews

Security: You're Doing it Wrong. More Flash Fallacies Found

  January 7th, 2010



WE RECOMMEND
Security: You're Doing it Wrong. More Flash Fallacies Found



Following the admonition of Kingston more supposedly secure drives are found to be vulnerable. Details have emerged of the far too simple hack that makes quick work defeating certain encryption programs. The drives themselves remain secure except the common software that opens them up seems to use basically the same "password correct" command to the drive to start serve up the protected contents. Using and in-line sniffer the universal password was discovered, and could easily be inserted into the data stream and start unraveling all those super secret files, like using a digital bump-key. Many of these affected drives have been granted FIPS 140-2 government security standards certification, whoops.

This is a very easy hack, and by "easy" we mean that you'd need to have a degree in electronics and a penchant for reading binary data with a few months to spare to whip up a program. You could always convert to TrueCrypt or some other software based encryption tool. If not, you should check to see if your drive is affected, and whether or not you can return it or patch it. Verbatim and SanDisk both have released software patches that should fix the issue. Since this vulnerability seems to have been incorporated into several manufacturers, more are likely to come to light in the next few weeks. You'd be wise to keep an eye on the feeds to make sure your private drive doesn't show up on the list.

Via InfoSecurity

More USB Flash Drives



About Everything USB
USB technology is the de facto connectivity standard for PC peripherals & consumer electronics; it has evolved from USB 1.1 to USB 2.0, Wireless USB and USB 3.0. Everything USB takes an in-depth look at these products and other offbeat USB gadgets, and brings you information and reviews needed for you to make a purchase decision. Welcome and enjoy your stay.

If you would like to contact us with a tip or comment, please write to: newstips@everythingusb.com

Subscribe to Everything USB RSS feedSubscribe to our RSS
Subscriber count: Over 10,000!

Everything USB on TwitterFollow us on Twitter
Yea, we do microblogging now.

Everything USB on FacebookJoin our FaceBook Club
Anyone over the age of 13 is welcome.



Hardware Reviewers Wanted... Check Out Details.
USB 2.0, USB OTG, Hi-Speed USB, Wireless USB
Copyright 2010 Everything USB
Home News USB Hardware USB Apps Forums Jobs About Us
Everything USB Sitemap Reader Resources Privacy Policy