Log in

View Full Version : [ARTUT] A Security Aspect Of USB Flash Drives


potassium
December 5th, 2006, 14:04
Have you ever asked yourself these questions?

· How safe is the password function of my USB flash drive (UFD)?
· What if I loose or forget my password, then what?
· If my UFD is lost or stolen, can someone else access my data?

If so, continue reading this document and you will hopefully get some answers!

This paper will focus on three different USB flash drives and the different software that is distributed with the UFD in question. It also includes a brief analysis of how safe they are. Or should I say “how unsafe they are?!”. As the software that I have tested does not use encryption a simple patch may sometimes do the trick and provide us with the real password.

Enjoy your Read

potassium / ARTeam

Grab it here: http://arteam.accessroot.com/tutorials.html

Silver
December 5th, 2006, 14:51
Well written and nicely presented. Definitely shows the need to encrypt data using something like Truecrypt in Traveller mode...

dELTA
December 7th, 2006, 10:58
Yep, never trust those custom protections on cheap hardware devices... Thanks for your contribution potassium.

Shub-nigurrath
September 29th, 2007, 17:14
News,
potassium took care of updating the tutorial and his tool too.

Update due to additional information and example of random AND-XOR:ed password

the tutorial is on our tutorials page the tool is in our releases page.

LLXX
September 29th, 2007, 18:21
It's not inconceivable that a hashed password could be used...